- dovecot - dovecot.org

[Dovecot] lazy-expunge acl bug?
by Martin Ott 11 Jun '10

11 Jun '10

Hi, we've defined a public namespace "shared" and use the acl and lazy-expunge plugins among others. The problem is, that a mailbox is deleted by the DELETE-command without the x-flag to be set (# 1.2.9): a myrights shared/aclDeleteTest * MYRIGHTS "shared/aclDeleteTest" lrsed a OK Myrights completed. b delete shared/aclDeleteTest b OK Delete completed. c myrights shared/aclDeleteTest c NO Mailbox doesn't exist: aclDeleteTest This behavior should be different and the mailbox should not be deleted, should it? Is there a fast workaround? Without the e-flag, mailboxes can't be deleted. But as some users should be allowed to use the expunge operation, it's no option to remove the e-flag... thx Martin

2 7

[Dovecot] problems with shared mailboxes and other general issues
by Tom Lieuallen 11 Jun '10

11 Jun '10

I'm also having beginner's troubles with shared mailboxes with dovecot 1.2.11. I've used the TestInstallation instructions for connecting to the imap port via openssl and issuing the setacl/getacl commands. Those appear to be fine. I'm having real difficulty with the acl_shared_dict configuration. I'd prefer to just use a flat file, as I don't anticipate using shared folders very frequently. I don't need a database and would greatly prefer not to have a dependency on our database service. So, with this setting: acl_shared_dict = file:/private/dovecot/var/etc/shared-mailboxes The '../var/etc' directory is something like 755. I have to create the file first and make it 666. When it is updated, ownership & permissions are changed such that the user giving acl permissions then owns the file and it's 600. I tried setting it back to 644 afterward, so other users could read it, but they tried setting a lock in that dir as well. I tried this: acl_shared_dict = file:/private/dovecot/var/etc/shared-list/shared-mailboxes-%u Then I made shared-list have '1777' permissions. Permissions-wise, this will now work, including locks, but I'm guessing this is just plain wrong and I still can't verify access. My second choice was to use sqlite for this acl_shared_dict, but, even though I compiled dovecot with sqlite support and 'ldd' shows that '../libexec/dict' is linked against sqlite libraries, when I tried this config: acl_shared_dict = sqlite:/private/dovecot/etc/acl-shared-dict.conf I get this, and dovecot fails to start up. EUnknown dict module: sqlite I question whether I can use sqlite for acl_shared_dict. Furthermore, in this vein, I don't really know what the shared namespace should even look like. I've been trying the imap commands LIST and MYRIGHTS to verify access, but there are simply no examples. I'd rather expect this to work: x myrights shared/fromuser/folder but all I get is mailbox doesn't exist. I know 'shared' is the namespace, but I just don't know how it should really be referred to. Personally, I can live without the acl_shared_dict (from what I understand). I don't need to see the shared path for subscription, I'd just manually add the folder path to the .subscriptions file for the handful of users that need it. I just don't think it's working, though. On a related note, I thought I'd increase debugging to see if that helped out any. When I change 'mail_debug' to 'yes', as soon as I issue the imap login command, it logs some stuff, then kicks me out. Jun 09 15:57:53 IMAP(tom2): Info: acl: initializing backend with data: vfile Jun 09 15:57:53 IMAP(tom2): Info: acl: acl username = tom2 Jun 09 15:57:53 IMAP(tom2): Info: acl: owner = 1 Jun 09 15:57:53 dovecot: Error: child 6000 (imap) killed with signal 11 (core dumps disabled) I would assume this error is causing my problems, but for all I know, it could be a side-effect of verbose debugging -- to just terminate. I see nothing about that in the docs, though. imap works fine without verbose logging, so I'm baffled. I have been frustrated by the shared namespace documentation. I've been through it again and again, but haven't found the answers I've been looking for. Here is the relevant configuration: namespace shared { location = mbox:%%h/mail/shared:INDEX=%%h/mail/shared/.imap # everything else defaults } protocol imap { mail_plugins = quota imap_quota acl imap_acl } protocol lda { mail_plugins = acl } plugin { acl = vfile acl_shared_dict = file:/private/dovecot/var/etc/shared-list/shared-mailboxes-%u }

2 3

[Dovecot] R: Re: Dovecot 2.0 shared mailbox using ACLs problem
by p.quidacciolu＠libero.it 11 Jun '10

11 Jun '10

Hi, now I'm able to share/access to the shared mailbox, but when try to write (as owner) in each mailbox, I catch a segfault of the imap process. In the next the trace. I'm using "dovecot-2-0-2d6cf78982dc". -------% <----------------------------------------------------------------------------------------------- Process 3504 attached - interrupt to quit gettimeofday({1276190723, 456087}, NULL) = 0 gettimeofday({1276190723, 456268}, NULL) = 0 epoll_wait(8, {{EPOLLIN, {u32=21055056, u64=21055056}}}, 6, 1561185) = 1 gettimeofday({1276190728, 692157}, NULL) = 0 gettimeofday({1276190728, 692268}, NULL) = 0 read(10, "8 append \"myshare\" (\\Seen Junk) \"08"..., 7928) = 2472 stat("/mnt/mbox1/mailusers/user2(a)example.gov.it/Maildir/.myshare/dovecot-acl", {st_mode=S_IFREG|0600, st_size=40, ...}) = 0 stat("/mnt/mbox1/mailusers/user2(a)example.gov.it/Maildir/.myshare", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 stat("/mnt/mbox1/mailusers/user2(a)example.gov.it/Maildir/.myshare", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 stat("/mnt/mbox1/mailusers/user2(a)example.gov.it/Maildir/.myshare", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 stat("/mnt/mbox1/mailusers/user2(a)example.gov.it/Maildir/.myshare", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 stat("/mnt/mbox1/mailusers/user2(a)example.gov.it/Maildir/.myshare/tmp", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 stat("/mnt/mbox1/mailusers/user2(a)example.gov.it/Maildir/.myshare/dovecot- shared", 0x7fff8358bdc0) = -1 ENOENT (No such file or directory) access("/mnt/mbox1/mailusers/user2(a)example.gov.it/Maildir/.myshare/cur", W_OK) = 0 open("/mnt/mbox1/mailusers/user2(a)example.gov.it/Maildir/.myshare/dovecot.index. log", O_RDWR) = 9 fstat(9, {st_mode=S_IFREG|0600, st_size=640, ...}) = 0 pread(9, "\1\2 (\0\331\32\21L\2\0\0\0\1\0\0\0\0\0\0\0\331\32\21L\0\0\0\0\0\0\0\0"..., 40, 0) = 40 stat("/mnt/mbox1/mailusers/user2(a)example.gov.it/Maildir/.myshare/dovecot.index. log.2", 0x7fff8358bcb0) = -1 ENOENT (No such file or directory) open("/mnt/mbox1/mailusers/user2(a)example.gov.it/Maildir/.myshare/dovecot. index", O_RDWR) = -1 ENOENT (No such file or directory) stat("/mnt/mbox1/mailusers/user2(a)example.gov.it/Maildir/.myshare/dovecot.index. log", {st_mode=S_IFREG|0600, st_size=640, ...}) = 0 fstat(9, {st_mode=S_IFREG|0600, st_size=640, ...}) = 0 pread(9, "\200\200\200\211@\0\0\20\377\377\377\377\0\0\0\0$\0\0\0\0\0\0\0\1\0\7\0mail"..., 8192, 40) = 600 pread(9, "", 8192, 640) = 0 epoll_ctl(8, EPOLL_CTL_DEL, 10, {0, {u32=21055056, u64=21055056}}) = 0 epoll_ctl(8, EPOLL_CTL_ADD, 10, {EPOLLIN|EPOLLPRI|EPOLLERR|EPOLLHUP, {u32=21055056, u64=21055056}}) = 0 open("/etc/localtime", O_RDONLY) = 11 fstat(11, {st_mode=S_IFREG|0644, st_size=2652, ...}) = 0 fstat(11, {st_mode=S_IFREG|0644, st_size=2652, ...}) = 0 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x2ab70eac0000 read(11, "TZif2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\6\0\0\0\6\0\0\0\0"..., 4096) = 2652 lseek(11, -1701, SEEK_CUR) = 951 read(11, "TZif2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\0\10\0\0\0\0"..., 4096) = 1701 close(11) = 0 munmap(0x2ab70eac0000, 4096) = 0 --- SIGSEGV (Segmentation fault) @ 0 (0) --- Process 3504 detached -------% <----------------------------------------------------------------------------------------------- >----Messaggio originale---- >Da: tss(a)iki.fi >Data: 07/06/2010 21.12 >A: "p.quidacciolu(a)libero.it"<p.quidacciolu(a)libero.it> >Cc: <dovecot(a)dovecot.org> >Ogg: Re: [Dovecot] Dovecot 2.0 shared mailbox using ACLs problem > >On pe, 2010-04-02 at 11:07 +0200, p.quidacciolu(a)libero.it wrote: > >> I'm trying to configure shared mailboxes using ACLs. >> On dovecot 1.2.10 it works fine, but the same configuration on dovecot 2.0. >> beta4 doesn't work. >> When I try to access to the shared mailbox I get the following message: >> Query: SELECT "users/user2/INBOX" >> Reason Given: Mailbox doesn't exist: users/user2/INBOX > >Have you tried this with recent nightly snapshots? > > >

2 2

Re: [Dovecot] Thunderbird namespace handling
by xueron＠xueron.com 11 Jun '10

11 Jun '10

>---- Original Message ---- >From: Timo Sirainen <tss(a)iki.fi> >To: "Thomas Hummel" <hummel(a)pasteur.fr> >Cc: "Dovecot Mailing List" <dovecot(a)dovecot.org> >Sent: Fri, Jun 11, 2010, 21:49 PM >Subject: Re: [Dovecot] Thunderbird namespace handling > >On to, 2010-06-10 at 18:18 +0200, Thomas Hummel wrote: >> > See this thread: >> > http://mailman2.u.washington.edu/pipermail/imap-protocol/2010-May/001076.ht… >> >> I've read it but I still don't get the point : >> >> I thought "hidden = no" would advertise this namespace for clients >> which support NAMESPACE and that "list = yes" would allow clients which >> don't support NAMESPACE to access this namespace ? >> >> What's wrong with that ? > >The point of that thread was: With list=yes the client already can >access the mailboxes in it without knowing anything about namespaces, so >listing it also in namespaces is pointless.

1 0

[Dovecot] Question about directory hashing
by Javier de Miguel Rodríguez 11 Jun '10

11 Jun '10

Hello I have been reading http://wiki.dovecot.org/MailLocation and http://wiki.dovecot.org/Variables and I do not fully understand the directory hashing feature. I want to migrate > 70.000 users from Sun Messaging to Dovecot using imapsync. I have tested with mail_location=maildir:/buzones/us.es/%1Hu/%2.1u/%n but I get the following directory tree: `-- 0 |-- - |-- 1 |-- 2 |-- 3 |-- 8 |-- _ |-- a |-- ab |-- b |-- c |-- d |-- e |-- ev |-- f |-- g |-- h |-- i |-- ie |-- is |-- j |-- jb |-- jj |-- jp |-- js |-- k |-- l |-- m |-- mb |-- n |-- o |-- p |-- pp |-- q |-- r |-- rm |-- s |-- t |-- u |-- v |-- w |-- x |-- y `-- z The ideal directory layout should be the following: First directory level: Letters from a to z Second directory level: Numbers from 0 to 200 Third directory level: %n (username without @domain) How can I achive this directory layout (or other optimized for 70.000 users) . I use ext3 on Red Hat Enterprise Linux 5 with directory indexes on. Regards Javier de Miguel

2 1

[Dovecot] Fail2ban
by Jerrale Gayle 11 Jun '10

11 Jun '10

I have fail2ban working for EVERYTHING else except dovecot. I have tried using my own custom regex in conjunction with the regex on the dovecot.org site. Neither are picked up by fail2ban and I'm trying to use an imminent attack agaist dovecot, going on now, to my advantage to see when I get the right regexp. Here are my current ones: failregex = .*dovecot: (?:pop3-login|imap-login): (?:Disconnected|Aborted login) $(?:auth failed, .* attempts|no auth attempts)$:.*rip=<HOST>,.* <<< this is my custom (?: pop3-login|imap-login): (?:Authentication failure|Aborted login \(auth failed|Aborted login \(tried to use disabled|Disconnected \(auth failed).*rip=(?P<host>\S*),.* <<< from dovecot.org .*warning:.\S*\[(?P<host>)\]: SASL.(?:PLAIN|LOGIN).authentication failed:.* Here is the current attack: Jun 10 17:18:10 mail dovecot: pop3-login: Disconnected (auth failed, 1 attempts): user=<rahul>, method=PLAIN, rip=113.12.82.71, lip=173.50.101.12 Can someone help me out a little? Thanks, Jerrale G

6 6

[Dovecot] Evolution and Thunderbird do different things?
by Phil Howard 10 Jun '10

10 Jun '10

I'm trying both Evolution and Thunderbird on my IMAP server, and find that there are differences in how some things are done, between clients. Shouldn't there have been a standard way to do these things in the IMAP protocol? The first thing I noticed is that when deleting email from one client, it puts a "T" on the file name, leaving it where it is, and from the other client, it moves the mail to a ".Trash" directory on the server (and created a 2nd "Trash" folder ... so now I have 2 "Trash" folders, one with some deleted mail in it, and the other with some deleted mail in it). I'm not saying Dovecot has a problem here. But maybe IMAP the protocol does for not having a standard way to do things, and these clients, for not doing it the same way (if there is some standard somewhere). Any IMAP experts here know what the story is with this?

5 8

[Dovecot] Problem with LDAP query
by Aleix Dorca 10 Jun '10

10 Jun '10

Hi people, first message to this list. I've a problem with dovecot 1.0.15 (debian latest package) and an LDAP query. The situation is the following. My LDAP users have multiple mail addresses (field 'mail') and mail should be able to be sent to any of these and the mail should always end on the user's mailbox. This is not working for me now. My dovecot-ldap.conf relevant config shows: user-attrs = uid=user user_filter = (&(objectClass=posixAccount)(|(uid=%n)(mail=%u))) This correctly detects multiple addresses but mail always end in folder (from dovecot.conf): mail_location = maildir:/home/vmail/%n/Maildir So if user@domain gets a mail it ends in /home/vmail/user/Maildir but if the same user gets an email to user-alt@domain it ends in /home/vmail/user-alt/Maildir instead of /home/vmail/user/Maildir. I've been debugging and I get this on my mail.log file: Jun 10 12:41:29 horologium deliver(user-alt@domain): auth input: user-alt@domain Jun 10 12:41:29 horologium deliver(user-alt@domain): auth input: user=user Jun 10 12:41:29 horologium deliver(user-alt@domain): auth input: uid=5000 Jun 10 12:41:29 horologium deliver(user-alt@domain): auth input: gid=5000 Jun 10 12:41:29 horologium deliver(user-alt@domain): maildir: data=/home/vmail/user-alt/Maildir Jun 10 12:41:29 horologium deliver(user-alt@domain): maildir: root=/home/vmail/user-alt/Maildir, index=/home/vmail/user-alt/Maildir, control=, inbox= Since I'm in version 1.0.15 can't use the mailLocation with the $ substitution. Anyway, any help will be appreciated. My dovecot -n result: # 1.0.15: /etc/dovecot/dovecot.conf log_timestamp: %Y-%m-%d %H:%M:%S protocols: imap imaps pop3 pop3s ssl_cert_file: /etc/dovecot/certs/domain.crt ssl_key_file: /etc/dovecot/certs/domain.key disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable(default): /usr/lib/dovecot/imap-login login_executable(imap): /usr/lib/dovecot/imap-login login_executable(pop3): /usr/lib/dovecot/pop3-login mail_privileged_group: mail mail_location: maildir:/home/vmail/%n/Maildir mail_executable(default): /usr/lib/dovecot/imap mail_executable(imap): /usr/lib/dovecot/imap mail_executable(pop3): /usr/lib/dovecot/pop3 mail_plugin_dir(default): /usr/lib/dovecot/modules/imap mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap mail_plugin_dir(pop3): /usr/lib/dovecot/modules/pop3 pop3_uidl_format(default): pop3_uidl_format(imap): pop3_uidl_format(pop3): %08Xu%08Xv auth default: mechanisms: plain login passdb: driver: ldap args: /etc/dovecot/dovecot-ldap.conf userdb: driver: ldap args: /etc/dovecot/dovecot-ldap.conf socket: type: listen master: path: /var/run/dovecot/auth-master mode: 384 user: vmail group: vmail Thanks a lot, Aleix Dorca.

1 0

[Dovecot] Dovecot v2.0.beta5 (2d6cf78982dc): Crashes upon client login
by Thomas Leuxner 10 Jun '10

10 Jun '10

Core dump upon client login with latest changes, gdb attached: ==> /var/log/dovecot.log <== Jun 8 19:26:05 spectre dovecot: master: Dovecot v2.0.beta5 (2d6cf78982dc) starting up Jun 8 19:26:21 spectre dovecot: imap-login: Login: user=<tlx(a)leuxner.net>, method=PLAIN, rip=10.10.10.10, lip=1.2.3.4, mpid=9997, TLS Jun 8 19:26:21 spectre dovecot: master: Error: service(imap): child 9997 killed with signal 11 (core dumped) Jun 8 19:26:21 spectre dovecot: imap-login: Login: user=<tlx(a)leuxner.net>, method=PLAIN, rip=10.10.10.10, lip=1.2.3.4, mpid=9999, TLS Jun 8 19:26:21 spectre dovecot: master: Error: service(imap): child 9999 killed with signal 11 (core dumped) Jun 8 19:26:26 spectre dovecot: imap-login: Login: user=<tlx(a)leuxner.net>, method=PLAIN, rip=10.10.10.10, lip=1.2.3.4, mpid=10001, TLS Jun 8 19:26:28 spectre dovecot: master: Error: service(imap): child 10001 killed with signal 11 (core dumped) Jun 8 19:26:32 spectre dovecot: master: Warning: Killed with signal 15 (by pid=10021 uid=0 code=kill) Core was generated by `dovecot/imap'. Program terminated with signal 11, Segmentation fault. [New process 10001] #0 quota_mailbox_transaction_commit (ctx=0x1d66660, changes_r=0x7fffec59fd80) at quota-storage.c:91 91 quota-storage.c: No such file or directory. in quota-storage.c #0 quota_mailbox_transaction_commit (ctx=0x1d66660, changes_r=0x7fffec59fd80) at quota-storage.c:91 qbox = (struct quota_mailbox *) 0x1d5df50 qt = (struct quota_transaction_context *) 0x0 #1 0x00007fcfcaf5b69d in mailbox_transaction_commit_get_changes (_t=<value optimized out>, changes_r=0x7fffec59fd80) at mail-storage.c:1194 _data_stack_cur_id = 4 t = (struct mailbox_transaction_context *) 0x1d66660 ret = <value optimized out> #2 0x00007fcfcaf5b6d6 in mailbox_transaction_commit (t=0x18) at mail-storage.c:1178 changes = {pool = 0xa0, uid_validity = 0, saved_uids = {arr = {buffer = 0x0, element_size = 30553128}, v = 0x0, v_modifiable = 0x0}, ignored_uid_changes = 30770416, ignored_modseq_changes = 0} ret = <value optimized out> #3 0x0000000000415a93 in imap_search_deinit (ctx=0x1d584e0) at imap-search.c:575 ret = 0 #4 0x00000000004160cc in cmd_search_more (cmd=0x1d583d8) at imap-search.c:402 ctx = (struct imap_search_context *) 0x1d584e0 opts = SEARCH_RETURN_ALL sync_flags = <value optimized out> end_time = {tv_sec = 30988688, tv_usec = 1024} id = 18766 id_min = <value optimized out> id_max = 0 time_msecs = <value optimized out> tryagain = false lost_data = false __FUNCTION__ = "cmd_search_more" #5 0x0000000000416484 in imap_search_start (ctx=0x1d584e0, sargs=0x1d65698, sort_program=0x0) at imap-search.c:550 cmd = (struct client_command_context *) 0x1d583d8 wanted_fields = 0 wanted_headers = (struct mailbox_header_lookup_ctx *) 0x0 #6 0x000000000040d443 in cmd_search (cmd=0x1d583d8) at cmd-search.c:45 ctx = <value optimized out> sargs = (struct mail_search_args *) 0x1d65698 args = (const struct imap_arg *) 0x1d5ac30 charset = 0x41a0cc "UTF-8" ret = 0 #7 0x000000000041030c in client_command_input (cmd=0x1d583d8) at imap-client.c:646 client = (struct client *) 0x1d57c78 command = <value optimized out> __FUNCTION__ = "client_command_input" #8 0x00000000004103bd in client_command_input (cmd=0x1d583d8) at imap-client.c:696 client = (struct client *) 0x1d57c78 command = (struct command *) 0x8 __FUNCTION__ = "client_command_input" #9 0x0000000000410535 in client_handle_input (client=0x1d57c78) at imap-client.c:737 _data_stack_cur_id = 3 ret = 34 remove_io = <value optimized out> handled_commands = false __FUNCTION__ = "client_handle_input" #10 0x0000000000410f82 in client_input (client=0x1d57c78) at imap-client.c:788 cmd = <value optimized out> output = (struct ostream *) 0x1d58258 bytes = <value optimized out> __FUNCTION__ = "client_input" #11 0x00007fcfcacf98eb in io_loop_handler_run (ioloop=<value optimized out>) at ioloop-epoll.c:212 ctx = (struct ioloop_handler_context *) 0x1d2b7d0 event = (const struct epoll_event *) 0x1d2b840 list = (struct io_list *) 0x1d58330 io = (struct io_file *) 0x1d582f0 tv = {tv_sec = 1799, tv_usec = 999330} t_id = 2 msecs = <value optimized out> ret = 1 call = <value optimized out> #12 0x00007fcfcacf8a68 in io_loop_run (ioloop=0x1d2b5c0) at ioloop.c:350 No locals. #13 0x00007fcfcace8563 in master_service_run (service=0x1d2b490, callback=0x18) at master-service.c:480 No locals. #14 0x0000000000419121 in main (argc=1, argv=0x1d2b370) at main.c:359 service_flags = <value optimized out> storage_service_flags = <value optimized out> postlogin_socket_path = 0x0 username = 0x0 c = <value optimized out> set_roots = {0x41c320, 0x0}

2 5

[Dovecot] converting from vm-pop3d
by Tim Uckun 09 Jun '10

09 Jun '10

Hello All. I am looking into an old server which is running vm-pop3d. This server is having problems because the pop3 server is taking up 100% of the CPU. I looked at the largest mailboxes and there are a handful over 20 megs in size, the largest one is 55megs, they are all mbox format (I think). I have been looking at the wiki and it looks like there is a perl script to make the mailboxes behave. There are also other scripts that try and convert mbox to maildir formats and from what I can gather dovecot can do this as well. Finally the dovecot in the fedora repos is 1.0.X and I notice that the latest in 1.2.X is there a more up to date dovecot RPM repo? I would appreciate any advice anybody can give me on how to proceed with this transition. Thank you in advance.

2 4