- dovecot - dovecot.org

[Dovecot] Shared Mailbox Questions
by Chris Hobbs 11 Jun '10

11 Jun '10

Hi All, I've pored over the wiki, read through the archive, and have what I believe should be a working set-up, but I can't seem to get my shared namespace to work correctly. Any guidance would be much appreciated. I started off using a flat file for acl_shared_dict and ran into the same problem recently reported with the shared-database file getting chown'd to the first user to touch it with 0600 permissions. So I thought I'd give it a whirl with sqlite. Here are the (hopefully) relevant bits from dovecot -n (the entire output is posted below). This is dovecot 1.2.9 running on a freshly installed ubuntu 10.4 server: namespace: type: shared separator: / prefix: shared/%%u/ location: maildir:/home/staff/%%n/Maildir:INDEX=~/Maildir/shared/%%u list: children plugin: acl_shared_dict: proxy::acl dict: acl: sqlite:/etc/dovecot/acl-shared-dict.conf acl-shared-dict.conf looks like this: connect = /home/staff/dovecot/acl-shared-ns.sqlite map { table = acl_shared_ns pattern = shared/shared-boxes/user/$to/$from value_field = has_visible_folders fields { from_user = $from to_user = $to } } /home/staff/dovecot/acl-shared-ns.sqlite is set 0666, and I can add records to it from the sqlite command line as a normal user. The table was created with: CREATE TABLE acl_shared_ns (from_user, to_user, has_visible_folders, PRIMARY KEY (from_user) ON CONFLICT REPLACE); When I attempt to SETACL from a telnet imap session, I get the following errors in mail.err: Jun 9 22:10:23 imap2 dovecot: dict: dict sql iterate failed: file is encrypted or is not a database Jun 9 22:10:23 imap2 dovecot: dict: dict sql iterate failed: file is encrypted or is not a database Jun 9 22:10:23 imap2 dovecot: dict: sqlite: exec(INSERT INTO acl_shared_ns (has_visible_folders,to_user,from_user) VALUES ('1','chobbs','IOchoa')) failed: file is encrypted or is not a database (26) Jun 9 22:10:23 imap2 dovecot: IMAP(IOchoa): read(/var/run/dovecot/dict-server) failed: Remote disconnected Jun 9 22:10:23 imap2 dovecot: IMAP(IOchoa): acl: dict commit failed Jun 9 22:10:23 imap2 dovecot: dovecot: child 8268 (dict) killed with signal 11 (core dumps disabled) Running that same "INSERT INTO..." as the IOchoa user from the sqlite command line works just fine. At this point any further deleteacl or setacl commands simply hang, presumably because there's no longer a running dict process. Here is the entire output of dovecot -n: # 1.2.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-22-server x86_64 Ubuntu 10.04 LTS log_timestamp: %Y-%m-%d %H:%M:%S protocols: imap imaps pop3 pop3s managesieve listen(default): * listen(imap): * listen(pop3): * listen(managesieve): *:2000 disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable(default): /usr/lib/dovecot/imap-login login_executable(imap): /usr/lib/dovecot/imap-login login_executable(pop3): /usr/lib/dovecot/pop3-login login_executable(managesieve): /usr/lib/dovecot/managesieve-login mail_privileged_group: mail mail_uid: mail mail_gid: mail mail_location: maildir:~/Maildir mmap_disable: yes mail_nfs_storage: yes mail_nfs_index: yes mbox_write_locks: fcntl dotlock mail_executable(default): /usr/lib/dovecot/imap mail_executable(imap): /usr/lib/dovecot/imap mail_executable(pop3): /usr/lib/dovecot/pop3 mail_executable(managesieve): /usr/lib/dovecot/managesieve mail_plugins(default): acl imap_acl mail_plugins(imap): acl imap_acl mail_plugins(pop3): mail_plugins(managesieve): mail_plugin_dir(default): /usr/lib/dovecot/modules/imap mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap mail_plugin_dir(pop3): /usr/lib/dovecot/modules/pop3 mail_plugin_dir(managesieve): /usr/lib/dovecot/modules/managesieve namespace: type: private separator: / inbox: yes list: yes subscriptions: yes namespace: type: shared separator: / prefix: shared/%%u/ location: maildir:/home/staff/%%n/Maildir:INDEX=~/Maildir/shared/%%u list: children lda: deliver_log_format: %$ -- FROM=%f SUBJECT=%s mail_plugins: cmusieve acl log_path: info_log_path: syslog_facility: mail postmaster_address: postmaster(a)nhusd.k12.ca.us hostname: mail.nhusd.k12.ca.us auth default: passdb: driver: pam passdb: driver: ldap args: /etc/dovecot/dovecot-ldap.conf userdb: driver: passwd userdb: driver: ldap args: /etc/dovecot/dovecot-ldap.conf plugin: acl: vfile acl_shared_dict: proxy::acl sieve: ~/.dovecot.sieve sieve_dir: ~/sieve dict: acl: sqlite:/etc/dovecot/acl-shared-dict.conf Chris Hobbs Director, Technology New Haven Unified School District -- This message was scanned by ESVA and is believed to be clean.

2 2

[Dovecot] "failed to store into mailbox 'INBOX': Not enough disk space." with large mail
by Johannes Dröge 11 Jun '10

11 Jun '10

Hello, I am having this error message on some rare emails with more than 6 mb or so. Neither the dovecot server nor the filesystem where the maildir resides have any quota or are full at the time of delivering. The mails goes getmail->postfix->dovecot delivery agent Is the mail written to any other place than the maildir folder? Even though all my temp folders should also be able to hold some megabytes... Thanks for any help, Johannes message: *sieve: info: started log at ... error: msgid=<XXX>: failed to store into mailbox 'INBOX': Not enough disk space. * dovecot --version 1.2.10 dovecot -n # 1.2.10: /etc/dovecot/dovecot.conf # OS: Linux 2.6.26-2-686 i686 Debian 5.0.4 xfs log_timestamp: %Y-%m-%d %H:%M:%S protocols: imaps ssl_cert_file: /etc/certificates/XXX ssl_key_file: /etc/certificates/XXX login_dir: /var/run/dovecot/login login_executable: /usr/lib/dovecot/imap-login login_greeting: XXX mail_access_groups: mail mail_location: maildir:/services/mail/%u mbox_write_locks: fcntl dotlock lda: postmaster_address: root mail_plugins: sieve auth default: verbose: yes passdb: driver: pam userdb: driver: passwd plugin: sieve: /var/sieve-scripts/%u/filter.sieve

8 20

[Dovecot] question about rpc quota reporting 1.2.11
by Tom Lieuallen 11 Jun '10

11 Jun '10

Timo, thank you for the reply to my question about shared folders yesterday. I'm now trying to get quota reporting working consistently. This is with dovecot 1.2.11 in solaris 10 sparc. We have local quotas for the mail spool (/a1) and quotas for home directories. All are UFS and have rpc (rquota) working fine. With just this: protocol imap { mail_plugins = quota imap_quota } My mail client (thunderbird 3.0.4) reported the home directory quota. So then I added this: plugin { quota = fs:INBOX:mount=/a1 quota2 = fs:Home:mount=%h } First, I had to make /a1/quotas world readable, otherwise I'd get this error: open(/a1/quotas) failed: Permission denied I'm getting the same type of error with the quota2 line now: open(/nfs/rack/u4/quotas) failed: Permission denied Since the home directory quota worked without the plugin configuration, my guess is that the plugin config is not using rpc. I can't find any way to force it to use rpc. Again, if I make that 'quotas' file world readable (which I believe isn't good practice), dovecot stops complaining. Also, what should I expect to see on the client? Will dovecot report only one quota (the one that's closer to the limit), or will it report both? I've only seen the first quota in thunderbird, but that could easily be a client issue. thank you Tom Lieuallen Oregon State University

2 4

[Dovecot] null errors from 2.0.beta5
by Mike Abbott 11 Jun '10

11 Jun '10

When my dovecot-2.0.beta5 auth module logs a 552-byte debug message, the message is split into two lines and also a null error message: Wed Jun 9 23:44:29 gromit dovecot[58892]: auth: Error: I think this has to do with the use of PIPE_BUF (512) sized buffers in the logging code, and the !line_is_ok() case in i_failure_parse_line(). Could you please remove the null error message? Just a nuisance, nothing serious. Thanks.

2 2

[Dovecot] lazy-expunge acl bug?
by Martin Ott 11 Jun '10

11 Jun '10

Hi, we've defined a public namespace "shared" and use the acl and lazy-expunge plugins among others. The problem is, that a mailbox is deleted by the DELETE-command without the x-flag to be set (# 1.2.9): a myrights shared/aclDeleteTest * MYRIGHTS "shared/aclDeleteTest" lrsed a OK Myrights completed. b delete shared/aclDeleteTest b OK Delete completed. c myrights shared/aclDeleteTest c NO Mailbox doesn't exist: aclDeleteTest This behavior should be different and the mailbox should not be deleted, should it? Is there a fast workaround? Without the e-flag, mailboxes can't be deleted. But as some users should be allowed to use the expunge operation, it's no option to remove the e-flag... thx Martin

2 7

[Dovecot] problems with shared mailboxes and other general issues
by Tom Lieuallen 11 Jun '10

11 Jun '10

I'm also having beginner's troubles with shared mailboxes with dovecot 1.2.11. I've used the TestInstallation instructions for connecting to the imap port via openssl and issuing the setacl/getacl commands. Those appear to be fine. I'm having real difficulty with the acl_shared_dict configuration. I'd prefer to just use a flat file, as I don't anticipate using shared folders very frequently. I don't need a database and would greatly prefer not to have a dependency on our database service. So, with this setting: acl_shared_dict = file:/private/dovecot/var/etc/shared-mailboxes The '../var/etc' directory is something like 755. I have to create the file first and make it 666. When it is updated, ownership & permissions are changed such that the user giving acl permissions then owns the file and it's 600. I tried setting it back to 644 afterward, so other users could read it, but they tried setting a lock in that dir as well. I tried this: acl_shared_dict = file:/private/dovecot/var/etc/shared-list/shared-mailboxes-%u Then I made shared-list have '1777' permissions. Permissions-wise, this will now work, including locks, but I'm guessing this is just plain wrong and I still can't verify access. My second choice was to use sqlite for this acl_shared_dict, but, even though I compiled dovecot with sqlite support and 'ldd' shows that '../libexec/dict' is linked against sqlite libraries, when I tried this config: acl_shared_dict = sqlite:/private/dovecot/etc/acl-shared-dict.conf I get this, and dovecot fails to start up. EUnknown dict module: sqlite I question whether I can use sqlite for acl_shared_dict. Furthermore, in this vein, I don't really know what the shared namespace should even look like. I've been trying the imap commands LIST and MYRIGHTS to verify access, but there are simply no examples. I'd rather expect this to work: x myrights shared/fromuser/folder but all I get is mailbox doesn't exist. I know 'shared' is the namespace, but I just don't know how it should really be referred to. Personally, I can live without the acl_shared_dict (from what I understand). I don't need to see the shared path for subscription, I'd just manually add the folder path to the .subscriptions file for the handful of users that need it. I just don't think it's working, though. On a related note, I thought I'd increase debugging to see if that helped out any. When I change 'mail_debug' to 'yes', as soon as I issue the imap login command, it logs some stuff, then kicks me out. Jun 09 15:57:53 IMAP(tom2): Info: acl: initializing backend with data: vfile Jun 09 15:57:53 IMAP(tom2): Info: acl: acl username = tom2 Jun 09 15:57:53 IMAP(tom2): Info: acl: owner = 1 Jun 09 15:57:53 dovecot: Error: child 6000 (imap) killed with signal 11 (core dumps disabled) I would assume this error is causing my problems, but for all I know, it could be a side-effect of verbose debugging -- to just terminate. I see nothing about that in the docs, though. imap works fine without verbose logging, so I'm baffled. I have been frustrated by the shared namespace documentation. I've been through it again and again, but haven't found the answers I've been looking for. Here is the relevant configuration: namespace shared { location = mbox:%%h/mail/shared:INDEX=%%h/mail/shared/.imap # everything else defaults } protocol imap { mail_plugins = quota imap_quota acl imap_acl } protocol lda { mail_plugins = acl } plugin { acl = vfile acl_shared_dict = file:/private/dovecot/var/etc/shared-list/shared-mailboxes-%u }

2 3

[Dovecot] R: Re: Dovecot 2.0 shared mailbox using ACLs problem
by p.quidacciolu＠libero.it 11 Jun '10

11 Jun '10

Hi, now I'm able to share/access to the shared mailbox, but when try to write (as owner) in each mailbox, I catch a segfault of the imap process. In the next the trace. I'm using "dovecot-2-0-2d6cf78982dc". -------% <----------------------------------------------------------------------------------------------- Process 3504 attached - interrupt to quit gettimeofday({1276190723, 456087}, NULL) = 0 gettimeofday({1276190723, 456268}, NULL) = 0 epoll_wait(8, {{EPOLLIN, {u32=21055056, u64=21055056}}}, 6, 1561185) = 1 gettimeofday({1276190728, 692157}, NULL) = 0 gettimeofday({1276190728, 692268}, NULL) = 0 read(10, "8 append \"myshare\" (\\Seen Junk) \"08"..., 7928) = 2472 stat("/mnt/mbox1/mailusers/user2(a)example.gov.it/Maildir/.myshare/dovecot-acl", {st_mode=S_IFREG|0600, st_size=40, ...}) = 0 stat("/mnt/mbox1/mailusers/user2(a)example.gov.it/Maildir/.myshare", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 stat("/mnt/mbox1/mailusers/user2(a)example.gov.it/Maildir/.myshare", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 stat("/mnt/mbox1/mailusers/user2(a)example.gov.it/Maildir/.myshare", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 stat("/mnt/mbox1/mailusers/user2(a)example.gov.it/Maildir/.myshare", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 stat("/mnt/mbox1/mailusers/user2(a)example.gov.it/Maildir/.myshare/tmp", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 stat("/mnt/mbox1/mailusers/user2(a)example.gov.it/Maildir/.myshare/dovecot- shared", 0x7fff8358bdc0) = -1 ENOENT (No such file or directory) access("/mnt/mbox1/mailusers/user2(a)example.gov.it/Maildir/.myshare/cur", W_OK) = 0 open("/mnt/mbox1/mailusers/user2(a)example.gov.it/Maildir/.myshare/dovecot.index. log", O_RDWR) = 9 fstat(9, {st_mode=S_IFREG|0600, st_size=640, ...}) = 0 pread(9, "\1\2 (\0\331\32\21L\2\0\0\0\1\0\0\0\0\0\0\0\331\32\21L\0\0\0\0\0\0\0\0"..., 40, 0) = 40 stat("/mnt/mbox1/mailusers/user2(a)example.gov.it/Maildir/.myshare/dovecot.index. log.2", 0x7fff8358bcb0) = -1 ENOENT (No such file or directory) open("/mnt/mbox1/mailusers/user2(a)example.gov.it/Maildir/.myshare/dovecot. index", O_RDWR) = -1 ENOENT (No such file or directory) stat("/mnt/mbox1/mailusers/user2(a)example.gov.it/Maildir/.myshare/dovecot.index. log", {st_mode=S_IFREG|0600, st_size=640, ...}) = 0 fstat(9, {st_mode=S_IFREG|0600, st_size=640, ...}) = 0 pread(9, "\200\200\200\211@\0\0\20\377\377\377\377\0\0\0\0$\0\0\0\0\0\0\0\1\0\7\0mail"..., 8192, 40) = 600 pread(9, "", 8192, 640) = 0 epoll_ctl(8, EPOLL_CTL_DEL, 10, {0, {u32=21055056, u64=21055056}}) = 0 epoll_ctl(8, EPOLL_CTL_ADD, 10, {EPOLLIN|EPOLLPRI|EPOLLERR|EPOLLHUP, {u32=21055056, u64=21055056}}) = 0 open("/etc/localtime", O_RDONLY) = 11 fstat(11, {st_mode=S_IFREG|0644, st_size=2652, ...}) = 0 fstat(11, {st_mode=S_IFREG|0644, st_size=2652, ...}) = 0 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x2ab70eac0000 read(11, "TZif2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\6\0\0\0\6\0\0\0\0"..., 4096) = 2652 lseek(11, -1701, SEEK_CUR) = 951 read(11, "TZif2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\0\10\0\0\0\0"..., 4096) = 1701 close(11) = 0 munmap(0x2ab70eac0000, 4096) = 0 --- SIGSEGV (Segmentation fault) @ 0 (0) --- Process 3504 detached -------% <----------------------------------------------------------------------------------------------- >----Messaggio originale---- >Da: tss(a)iki.fi >Data: 07/06/2010 21.12 >A: "p.quidacciolu(a)libero.it"<p.quidacciolu(a)libero.it> >Cc: <dovecot(a)dovecot.org> >Ogg: Re: [Dovecot] Dovecot 2.0 shared mailbox using ACLs problem > >On pe, 2010-04-02 at 11:07 +0200, p.quidacciolu(a)libero.it wrote: > >> I'm trying to configure shared mailboxes using ACLs. >> On dovecot 1.2.10 it works fine, but the same configuration on dovecot 2.0. >> beta4 doesn't work. >> When I try to access to the shared mailbox I get the following message: >> Query: SELECT "users/user2/INBOX" >> Reason Given: Mailbox doesn't exist: users/user2/INBOX > >Have you tried this with recent nightly snapshots? > > >

2 2

Re: [Dovecot] Thunderbird namespace handling
by xueron＠xueron.com 11 Jun '10

11 Jun '10

>---- Original Message ---- >From: Timo Sirainen <tss(a)iki.fi> >To: "Thomas Hummel" <hummel(a)pasteur.fr> >Cc: "Dovecot Mailing List" <dovecot(a)dovecot.org> >Sent: Fri, Jun 11, 2010, 21:49 PM >Subject: Re: [Dovecot] Thunderbird namespace handling > >On to, 2010-06-10 at 18:18 +0200, Thomas Hummel wrote: >> > See this thread: >> > http://mailman2.u.washington.edu/pipermail/imap-protocol/2010-May/001076.ht… >> >> I've read it but I still don't get the point : >> >> I thought "hidden = no" would advertise this namespace for clients >> which support NAMESPACE and that "list = yes" would allow clients which >> don't support NAMESPACE to access this namespace ? >> >> What's wrong with that ? > >The point of that thread was: With list=yes the client already can >access the mailboxes in it without knowing anything about namespaces, so >listing it also in namespaces is pointless.

1 0

[Dovecot] Question about directory hashing
by Javier de Miguel Rodríguez 11 Jun '10

11 Jun '10

Hello I have been reading http://wiki.dovecot.org/MailLocation and http://wiki.dovecot.org/Variables and I do not fully understand the directory hashing feature. I want to migrate > 70.000 users from Sun Messaging to Dovecot using imapsync. I have tested with mail_location=maildir:/buzones/us.es/%1Hu/%2.1u/%n but I get the following directory tree: `-- 0 |-- - |-- 1 |-- 2 |-- 3 |-- 8 |-- _ |-- a |-- ab |-- b |-- c |-- d |-- e |-- ev |-- f |-- g |-- h |-- i |-- ie |-- is |-- j |-- jb |-- jj |-- jp |-- js |-- k |-- l |-- m |-- mb |-- n |-- o |-- p |-- pp |-- q |-- r |-- rm |-- s |-- t |-- u |-- v |-- w |-- x |-- y `-- z The ideal directory layout should be the following: First directory level: Letters from a to z Second directory level: Numbers from 0 to 200 Third directory level: %n (username without @domain) How can I achive this directory layout (or other optimized for 70.000 users) . I use ext3 on Red Hat Enterprise Linux 5 with directory indexes on. Regards Javier de Miguel

2 1

[Dovecot] Fail2ban
by Jerrale Gayle 11 Jun '10

11 Jun '10

I have fail2ban working for EVERYTHING else except dovecot. I have tried using my own custom regex in conjunction with the regex on the dovecot.org site. Neither are picked up by fail2ban and I'm trying to use an imminent attack agaist dovecot, going on now, to my advantage to see when I get the right regexp. Here are my current ones: failregex = .*dovecot: (?:pop3-login|imap-login): (?:Disconnected|Aborted login) $(?:auth failed, .* attempts|no auth attempts)$:.*rip=<HOST>,.* <<< this is my custom (?: pop3-login|imap-login): (?:Authentication failure|Aborted login \(auth failed|Aborted login \(tried to use disabled|Disconnected \(auth failed).*rip=(?P<host>\S*),.* <<< from dovecot.org .*warning:.\S*\[(?P<host>)\]: SASL.(?:PLAIN|LOGIN).authentication failed:.* Here is the current attack: Jun 10 17:18:10 mail dovecot: pop3-login: Disconnected (auth failed, 1 attempts): user=<rahul>, method=PLAIN, rip=113.12.82.71, lip=173.50.101.12 Can someone help me out a little? Thanks, Jerrale G

6 6