- dovecot - dovecot.org

[Dovecot] quick question
by David Halik 18 Feb '10

18 Feb '10

Timo (and anyone else who feels like chiming in), I was just wondering if you'd be able to tell me if the amount of corruption I see on a daily basis is what you consider "average" for our current setup and traffic. Now that we are no longer experiencing any core dumps with the latest patches since our migration from courier two months ago, I'd like to know what is expected as operational norms. Prior to this we had never used Dovecot, so I have nothing to go on. Our physical setup is 10 Centos 5.4 x86_64 IMAP/POP servers, all with the same NFS backend where the index, control, and Maildir's for the users reside. Accessing this are direct connections from clients, plus multiple squirrelmail webservers, and pine users, all at the same time with layer4 switch connection load balancing. Each server has an average of about 400 connections, for a total of around concurrent 4000 during a normal business day. This is out of a possible user population of about 15,000. All our dovecot servers syslog to one machine, and on average I see about 50-75 instances of file corruption per day. I'm not counting each line, since some instances of corruption generate a log message for each uid that's wrong. This is just me counting "user A was corrupted once at 10:00, user B was corrupted at 10:25" for example. Examples of the corruption are as follows: ########### Corrupted transaction log file ..../dovecot/.INBOX/dovecot.index.log seq 28: Invalid transaction log size (32692 vs 32800): ...../dovecot/.INBOX/dovecot.index.log (sync_offset=32692) Corrupted index cache file ...../dovecot/.Sent Messages/dovecot.index.cache: Corrupted physical size for uid=624: 0 != 53490263 Corrupted transaction log file ..../dovecot/.INBOX/dovecot.index.log seq 66: Unexpected garbage at EOF (sync_offset=21608) Corrupted transaction log file ...../dovecot/.Trash.RFA/dovecot.index.log seq 2: indexid changed 1264098644 -> 1264098664 (sync_offset=0) Corrupted index cache file ...../dovecot/.INBOX/dovecot.index.cache: invalid record size Corrupted index cache file ...../dovecot/.INBOX/dovecot.index.cache: field index too large (33 >= 19) Corrupted transaction log file ..../dovecot/.INBOX/dovecot.index.log seq 40: record size too small (type=0x0, offset=5788, size=0) (sync_offset=5812) ########## These are most of the unique messages I could find, although the majority are the same as the first two I posted. So, my question, is this normal for a setup such as ours? I've been arguing with my boss over this since the switch. My opinion is that with a setup such as ours where a user can be logged in using Thunderbird, Squirrelmail, and their Blackberry all concurrently at the same time, there will always be the occasional index/log corruption. Unfortunately, he is of the opinion that there should rarely be any and there is a design flaw in how Dovecot is designed to work with multiple services with an NFS backend. What has been your experience so far? Thanks, -Dave -- ================================ David Halik System Administrator OIT-CSS Rutgers University dhalik(a)jla.rutgers.edu ================================

7 44

[Dovecot] Anyone successfully setup Continous Backup of mailboxes using rsync ?
by CoolAtt NNA 18 Feb '10

18 Feb '10

Hi All.. Am working on continous backup of mailboxes using rsync(for e.g by running rsync every 2 min) Things gets more complicated when users create Subfolders in INBOX , SENT , etc.. If anyone among you did that plz guide & advise. Thanks CoolAtt _________________________________________________________________ Your E-mail and More On-the-Go. Get Windows Live Hotmail Free. https://signup.live.com/signup.aspx?id=60969

17 41

[Dovecot] dovecot-sieve vacation vs qmail-ldap
by Lazy 18 Feb '10

18 Feb '10

Helloo, We are using dovectot lda with qmail-ldap, dovecot 1.2.10, sieve 0.1.15 lda is executed as exec /var/qmail/bin/preline -f /usr/local/dovecot/libexec/dovecot/deliver -s preline adds Delivered-To: header, everything works fine except vacation Feb 9 16:07:16 thebe dovecot: deliver(lazy): sieve: msgid=unspecified: discarding vacation response for message implicitly delivered to <lazy(a)thebe.org> Feb 9 16:07:16 thebe dovecot: deliver(lazy): sieve: msgid=unspecified: stored mail into mailbox 'INBOX' thebe.org is the hostname of the machine, oryginal recipient address has other domain .dovecot.sieve file looks like this require ["vacation"]; #autoresponder vacation :days 1 :subject "Auto Reply / Odpowiedz automatyczna" "aaaaaaaaaaaaaaaaaaaaa"; I did experiments with :addresses ["*"] without any luck. deliver only gets user and HOME directory form env variables provided by qmail, so it's unaware of the target email address. How to fix it ? I was thinking about deliver extracting target address from Delivered-To: header added by qmail's preline, or use DTLINE env variable, whitch qmail populates with Delivered-To header.

2 2

[Dovecot] Dovecot 1.2.8 problem on AIX
by Jonathan Siegle 18 Feb '10

18 Feb '10

Running revision 9492:3efdbaab2960(Mon Nov 23) on AIX 5.3. I run dovecot out of inetd. Every once in a while I get the following error: Dovecot is already running with PID 2592842 (read from /usr/ladmin/dovecot-1.2.8/var/run/dovecot/master.pid) when I try to connect to the imap port. -Jonathan

3 2

[Dovecot] using signed certificates for TLS/SSL
by Leonardo Rodrigues 18 Feb '10

18 Feb '10

Hi, I have, in one customer, a web server running on a Verisign-signed certificate SSL certificate. Everything works fine, IE and Firefox connects on https without asking anything, which usually happens on self-signed certificates. I'm trying to use that certificate on dovecot, but clients (Thunderbird basically) keeps saying the certificate is not valid. yes i'm using, when configuring Thunderbird, the same CN that was signed by Verisign for the web usage i've enabled verbose_ssl and got when thunderbird tries to connect: Feb 18 12:32:02 correio dovecot: imap-login: Disconnected (no auth attempts): rip=201.86.xxx.xxx, lip=192.168.1.2, TLS handshaking: SSL_accept() failed: error:14094418:SSL routines:SSL3_READ_BYTES:tlsv1 alert unknown ca unknown CA ??? is that Thunderbird that is not recognizing the Verisign-signed certificate ? Do i need to, somehow, install some Verisign CA certificate in dovecot.conf ? when using a self-signed certificate, i also get an SSL_accept failed, but with different message: Feb 18 12:41:45 correio dovecot: imap-login: Disconnected (no auth attempts): rip=201.86.191.114, lip=192.168.1.2, TLS handshaking: SSL_accept() failed: error:14094412:SSL routines:SSL3_READ_BYTES:sslv3 alert bad certificate despite the fact my certificates were generated for use with Apache, i can 'print' them, both of them, with the same commands i use to print dovecot generated certificates, with mkcert.sh. So, it seems they are compatible. if i click OK on Thunderbird, when using my Verisign-signed certificates, everything works and i do got TLS logs: Feb 18 12:23:36 correio dovecot: imap-login: Login: user=<user(a)domain.com.br>, method=PLAIN, rip=201.86.xx.xx, lip=192.168.1.2, TLS, TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits) Feb 18 12:31:43 correio dovecot: imap-login: Login: user=<user(a)domain.com.br>, method=PLAIN, rip=201.86.xx.xx, lip=192.168.1.2, TLS, TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits) what am i doing wrong ?? or using a signed-certificate for WEB usage is not possible on dovecot ? -- Atenciosamente / Sincerily, Leonardo Rodrigues Solutti Tecnologia http://www.solutti.com.br Minha armadilha de SPAM, NÃO mandem email gertrudes(a)solutti.com.br My SPAMTRAP, do not email it

3 3

[Dovecot] revision control on maildir possible?
by Markus Beyer 18 Feb '10

18 Feb '10

Hi, I was wondering if it is possible to put a dovecot managed maildir under a vcs like system, for example git or bzr. I'd like to have a seamless history of all mail going in and out of my mailboxes, so a vcs like system seams a good choice for me. I'm not quite sure however if that would cause any problems to dovecot and what the best way of handling commits would be. If anyone on the list got any pointers regarding this, it would be much apprechiated. Best regards, Markus -- Sicherer, schneller und einfacher. Die aktuellen Internet-Browser - jetzt kostenlos herunterladen! http://portal.gmx.net/de/go/atbrowser

3 2

[Dovecot] tls not working on ubuntu
by zhong ming wu 18 Feb '10

18 Feb '10

Hello List, I'm new to dovecot. I have sucessfully configured dovecot with just virtual users on a centos linux box to my satisfaction; I can connect with TLS with disable_plaintext_auth = yes. This dovecot is also version > 1. Can't post exact version right now but it's what comes with Centos 5.4. On a Ubuntu 9.10 box here, I cannot connect with TLS (port 110) but I can connect with plain SSL (port 995). The config files between centos and ubuntu boxes are the same except for minor details. The following is the log entry Feb 17 21:38:18 ubuntu dovecot: pop3-login: Disconnected (no auth attempts): rip=192.168.0.101, lip=192.168.0.108 The output below is from a binary compiled from source. I have also tested with 1.1.11 (that I get from apt-get install) with the same config file. I have tested ubuntu with both Thunderbird 3 and thunderbird 2. I have also searched google as well as dovecot website. Thanks mr.wu # 1.2.10: /usr/local/etc/dovecot.conf # OS: Linux 2.6.31-14-server x86_64 Ubuntu 9.10 ext4 base_dir: /var/run/dovecot/ protocols: pop3 pop3s listen: 192.168.0.108 ssl_cert_file: /usr/local/etc/pop.crt ssl_key_file: /usr/local/etc/pop.key ssl_parameters_regenerate: 29 disable_plaintext_auth: no verbose_ssl: yes login_dir: /var/run/dovecot//login login_executable: /usr/local/libexec/dovecot/pop3-login mail_location: maildir:/var/vmail/%d/%n mail_executable: /usr/local/libexec/dovecot/pop3 mail_plugin_dir: /usr/local/lib/dovecot/pop3 auth default: user: authdove debug: yes passdb: driver: passwd-file args: /usr/local/etc/%d/passwd userdb: driver: static args: uid=2000 gid=2000 home=/var/vmail/%d/%n

2 1

[Dovecot] Sieve libexec /usr/lib/dovecot/deliver
by Filip Dvořák 17 Feb '10

17 Feb '10

Hi, I have installed dovecot(1.2.10) with --libexecdir=/usr/lib . Dovecot sieve(0.1.15) is compiled with --with-dovecot but still uses /usr/libexec/dovecot/deliver instead of /usr/lib/dovecot/deliver. How should be dovecot sieve configured to use /usr/lib/dovecot/deliver thanks in advance Filip # dovecot configuration: ./configure --prefix=/usr --sysconfdir=/etc/dovecot --localstatedir=/var \ --libexecdir=/usr/lib --with-moduledir=/usr/lib/dovecot/modules \ --with-db --with-mysql --with-pgsql --with-sqlite \ --with-ssl=openssl --with-ssldir=/etc/dovecot/ssl \ --with-gssapi --with-ldap=plugin --enable-header-install --with-docs # dovecot sieve configuration: ./configure --prefix=/usr --with-dovecot=/usr/lib/dovecot # /usr/lib/dovecot/dovecot-config: CFLAGS="-std=gnu99 -march=i686 -mtune=generic -O2 -pipe -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -Wstrict-aliasing=2 " LIBS=" -lrt" SSL_LIBS="-lssl -lcrypto -ldl -lz " STORAGE_LIBS="$(top_builddir)/src/lib-storage/register/libstorage-register.a $(top_builddir)/src/lib-storage/list/libstorage_list.a $(top_builddir)/src/lib-storage/index/cydir/libstorage_cydir.a $(top_builddir)/src/lib-storage/index/dbox/libstorage_dbox.a $(top_builddir)/src/lib-storage/index/maildir/libstorage_maildir.a $(top_builddir)/src/lib-storage/index/mbox/libstorage_mbox.a $(top_builddir)/src/lib-storage/index/raw/libstorage_raw.a $(top_builddir)/src/lib-storage/index/shared/libstorage_shared.a $(top_builddir)/src/lib-storage/index/libstorage_index.a $(top_builddir)/src/lib-storage/libstorage.a $(top_builddir)/src/lib-index/libindex.a $(top_builddir)/src/lib-imap/libimap.a $(top_builddir)/src/lib-mail/libmail.a $(top_builddir)/src/lib-auth/libauth.a $(top_builddir)/src/lib-charset/libcharset.a $(top_builddir)/src/lib/liblib.a" LIBICONV="" MODULE_LIBS="-export-dynamic -ldl" dovecot_incdir=/usr/include/dovecot moduledir=/usr/lib/dovecot/modules CFLAGS="-std=gnu99 -march=i686 -mtune=generic -O2 -pipe -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscri LIBS=" -lrt" SSL_LIBS="-lssl -lcrypto -ldl -lz " STORAGE_LIBS="$(top_builddir)/src/lib-storage/register/libstorage-register.a $(top_builddir)/src/lib-storage/list/libstorage_list.a $(top_ LIBICONV="" MODULE_LIBS="-export-dynamic -ldl" dovecot_incdir=/usr/include/dovecot moduledir=/usr/lib/dovecot/modules # end of dovecot-config dovecot -n output: # 1.2.10: /etc/dovecot/dovecot.conf # OS: Linux 2.6.27-lts i686 ext3 protocols: imap imaps pop3 pop3s ssl_cert_file: /etc/ssl/mail.pruda.com/cert.pem ssl_key_file: /etc/ssl/mail.pruda.com/key.pem disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable(default): /usr/lib/dovecot/imap-login login_executable(imap): /usr/lib/dovecot/imap-login login_executable(pop3): /usr/lib/dovecot/pop3-login mail_location: maildir:/home/vmail/%u mail_executable(default): /usr/lib/dovecot/imap mail_executable(imap): /usr/lib/dovecot/imap mail_executable(pop3): /usr/lib/dovecot/pop3 mail_plugin_dir(default): /usr/lib/dovecot/modules/imap mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap mail_plugin_dir(pop3): /usr/lib/dovecot/modules/pop3 lda: postmaster_address: postmaster(a)pruda.com mail_plugins: sieve sieve_global_path: /home/vmail/dovecot-global.sieve sendmail_path: /usr/sbin/sendmail auth default: user: nobody passdb: driver: sql args: /etc/dovecot/dovecot-mysql.conf userdb: driver: sql args: /etc/dovecot/dovecot-mysql.conf socket: type: listen master: path: /var/run/dovecot/auth-master mode: 432 user: vmail group: vmail plugin: sieve: /home/vmail/%u/dovecot.sieve home: /home/vmail/%u

1 1

[Dovecot] Special user
by Daniel L. Miller 17 Feb '10

17 Feb '10

Not sure what to call this - I'm actually working out the details as I type this. I want to have a valid username/password for an account for sending purposes - but when receiving this is an alias that broadcasts to several users. Example: accountspayable(a)mydomain.com - is an alias for jane(a)mydomain.com, june(a)mydomain.com, and john(a)mydomain.com. However - any mails sent (from a particular client software) should all only show "accountspayable" as the sender. How would I implement this? I'm asking here because Dovecot serves as the authentication mechanism for my SMTP server (Postfix) via LDAP lookups. -- Daniel

4 4

[Dovecot] salted passwords
by Leonardo Rodrigues 17 Feb '10

17 Feb '10

The idea of salted hash algorithms is to generate a different hash even if the same text is entered. That can be easily seen with dovecotpw: using NON-salted SHA256, same hash is generated for a given password [root@correio ~]# dovecotpw -s SHA256 -p 123 {SHA256}pmWkWSBCL51Bfkhn79xPuKBKHz//H6B+mY6G9/eieuM= [root@correio ~]# dovecotpw -s SHA256 -p 123 {SHA256}pmWkWSBCL51Bfkhn79xPuKBKHz//H6B+mY6G9/eieuM= [root@correio ~]# dovecotpw -s SHA256 -p 123 {SHA256}pmWkWSBCL51Bfkhn79xPuKBKHz//H6B+mY6G9/eieuM= [root@correio ~]# using SALTED SHA256, a different hash is generated for the same given password [root@correio ~]# dovecotpw -s SSHA256 -p 123 {SSHA256}FpJZqafpEVKp2heepp9Z7+OeHaX+DBVpLzd6GKg3BW1XqDS0 [root@correio ~]# dovecotpw -s SSHA256 -p 123 {SSHA256}6lWmvtO3SKG5RMET5n89WMIp0xeCg3U14xH1xnAXbvkr8Yjk [root@correio ~]# dovecotpw -s SSHA256 -p 123 {SSHA256}7fXVjC7Iiu0Ko9SgyBpbDvbwMSkoxMILRjDUE0nNpCHBFaIa [root@correio ~]# This ideia is OK to me ... but i'm having a hard time trying to figure out how my dovecot-sql.conf would be in the case i store salted SHA256 passwords on the database. The idea is to use a RANDOM salt, not a fixed one, just like dovecotpw does. would it be as simple as changing the 'password', which today is plaintext, by something like concat('{SHA256}',password) ??? dont i have to give the salt, somehow ?? Or should i store the salt used in the password, for example first or last N characters .... is there anyone using dovecot with MySQL and SSHA256 passwords that can share me the dovecot-sql.conf file ? -- Atenciosamente / Sincerily, Leonardo Rodrigues Solutti Tecnologia http://www.solutti.com.br Minha armadilha de SPAM, NÃO mandem email gertrudes(a)solutti.com.br My SPAMTRAP, do not email it

5 6