- dovecot - dovecot.org

[Dovecot] Ownership and permissions for the index directory/filesystem
by Stewart Dean 14 Nov '09

14 Nov '09

I recently upgraded from DC 1.1.15 to 1.2.6. The /var/dcindx index root directory is: drwxrwsrwt 3962 root sys 192512 Nov 13 11:56 ./ thus 3777. It appears that the user index directories created under DC1.1 look like this (here for /var/dcindx/cep): drwx--S--- 5 cep sys 256 Nov 13 14:26 cep/ while those created under V1.2 look like: drwx------ 3 lrenart sys 256 Nov 12 14:59 lrenart/ It seems that the first time that DC goes to do indexing, I now see this error msg: Nov 12 11:45:15 mercury mail:err|error dovecot: IMAP(bpyi): open(/var/spool/mail/bpyi) failed: Permission denied (euid=2586(bpyi) egid=2000(bard2) missing +w perm: /var/spool/mail) ...but never again... Questions: 1) Are the ownership and permissions on the /var/dcindx index root directory ideal or should they be something else? 2) Ideally what should the ownership and permissions be for individual user subdirs? I create the user mail directories when creating a new account, so it would be little extra trouble to create and set the ownership and permissions. I am currently using mbox mailbox format but will be migrating to maildir over the next some months. Dovecot -n > # 1.2.6: /usr/local/etc/dovecot.conf > # OS: AIX 3 0001378F4C00 > listen: *:143 > ssl_listen: *:993 > disable_plaintext_auth: no > verbose_ssl: yes > login_dir: /var/run/dovecot/login > login_executable: /usr/local/libexec/dovecot/imap-login > login_processes_count: 12 > login_max_processes_count: 774 > max_mail_processes: 1280 > mail_max_userip_connections: 12 > verbose_proctitle: yes > first_valid_uid: 200 > mail_location: mbox:~/mail:INBOX=/var/spool/mail/%u:INDEX=/var/dcindx/%u > mbox_write_locks: fcntl > mbox_dirty_syncs: no > lda: > postmaster_address: postmaster(a)example.com > auth default: > passdb: > driver: pam > userdb: > driver: passwd -- ==== Once upon a time, the Internet was a friendly, neighbors-helping-neighbors small town, and no one locked their doors. Now it's like an apartment in Bed-Stuy: you need three heavy duty pick-proof locks, one of those braces that goes from the lock to the floor, and bars on the windows.... ==== Stewart Dean, Unix System Admin, Bard College, New York 12504 sdean(a)bard.edu voice: 845-758-7475, fax: 845-758-7035

2 1

[Dovecot] Index file (date timestamp) issue on OS X 10.6.2 Server
by Darren Latter 14 Nov '09

14 Nov '09

Hi, I've run into a bit of a problem and exhausted my knowledge and research. I'm hoping that I've overlooked something very obvious! I moved from a single Apple OS X 10.6.2 server Dovecot environment to a NFS clustered environment, currently with two servers. Both servers are identical hardware, software. Currently both the Dovecot index and data files are on the NFS RAID array. Both servers are configured to work with NFS per the Dovecot guides. The index and data files are accessed via a target link to the NFS mount via /var/spool/imap/dovecot. Email can be sent and received via either server and there are no errors being reported (both platforms are in debug mode). In essence everything appears to be working fine. The issue is that after the index is initially built (all email timestamps are correct) however any new incoming email is timestamped: 8 July 2037 23:53 I checked the index files: drwx------ 5 XXXX mail 4096 Nov 12 20:41 .UND -rw------- 1 XXXX staff 1472 Nov 13 12:30 .nfs.2005105c.0583 -rw------- 2 XXXX mail 56668 Nov 13 15:44 .nfs.200514ff.0583 -rw------- 2 XXXX mail 1364 Nov 13 15:44 .nfs.20051500.0583 drwx------ 2 XXXX mail 12288 Nov 13 15:44 cur -rw------- 1 XXXX mail 118 Nov 13 10:04 dovecot-keywords -rw------- 1 XXXX staff 5359 Nov 13 15:44 dovecot-uidlist -rw------- 1 XXXX staff 8 Nov 12 21:12 dovecot-uidvalidity -rw------- 1 XXXX mail 0 Jul 8 2037 dovecot-uidvalidity.4afc7a3a -rw------- 1 XXXX staff 1472 Nov 13 15:44 dovecot.index -rw------- 2 XXXX mail 56668 Nov 13 15:44 dovecot.index.cache -rw------- 2 XXXX mail 1364 Nov 13 15:44 dovecot.index.log -rw------- 1 XXXX mail 3859 Nov 13 15:47 maildirsize drwx------ 2 XXXX mail 4096 Nov 13 15:44 new -rw------- 1 XXXX mail 902 Nov 1 14:07 subscriptions drwx------ 2 XXXX mail 4096 Nov 13 15:44 tmp When checking the "stand alone" old data - the files are all correctly dated. This issue is the same for all users. Any ideas? Many thanks, Darren sh-3.2# /usr/sbin/dovecotd -n # 1.1.17apple0.5: /private/etc/dovecot/dovecot.conf Warning: fd limit 256 is lower than what Dovecot can use under full load (more than 456). Either grow the limit or change login_max_processes_count and max_mail_processes settings # OS: Darwin 10.0.0 i386 nfs base_dir: /var/run/dovecot syslog_facility: local6 protocols: managesieve imaps listen(default): * listen(imap): * listen(managesieve): *:2000 ssl_cert_file: /etc/certificates/X.X.org.X.cert.pem ssl_key_file: /etc/certificates/X.X.org.X.key.pem ssl_cipher_list: ALL:!LOW:!SSLv2:!aNULL:!ADH:!eNULL login_dir: /var/run/dovecot/login login_executable(default): /usr/libexec/dovecot/imap-login login_executable(imap): /usr/libexec/dovecot/imap-login login_executable(managesieve): /usr/libexec/dovecot/managesieve-login login_user: _dovecot login_process_per_connection: no max_mail_processes: 200 mail_max_userip_connections(default): 20 mail_max_userip_connections(imap): 20 mail_max_userip_connections(managesieve): 10 verbose_proctitle: yes first_valid_uid: 6 first_valid_gid: 6 mail_access_groups: mail mail_location: maildir:/var/spool/imap/dovecot/mail/%u mail_debug: yes mmap_disable: yes dotlock_use_excl: no mail_nfs_storage: yes mail_nfs_index: yes lock_method: dotlock mbox_read_locks: fcntl dotlock mbox_write_locks: fcntl dotlock mail_executable(default): /usr/libexec/dovecot/imap mail_executable(imap): /usr/libexec/dovecot/imap mail_executable(managesieve): /usr/libexec/dovecot/managesieve mail_process_sharing(default): full mail_process_sharing(imap): full mail_process_sharing(managesieve): none mail_max_connections(default): 5 mail_max_connections(imap): 5 mail_max_connections(managesieve): 20 mail_plugins(default): quota imap_quota mail_plugins(imap): quota imap_quota mail_plugins(managesieve): mail_plugin_dir(default): /usr/lib/dovecot/imap mail_plugin_dir(imap): /usr/lib/dovecot/imap mail_plugin_dir(managesieve): /usr/lib/dovecot/managesieve sieve_storage(default): sieve_storage(imap): sieve_storage(managesieve): /var/spool/imap/dovecot/sieve-scripts/%u sieve(default): sieve(imap): sieve(managesieve): /var/spool/imap/dovecot/sieve-scripts/%u/dovecot.sieve auth default: mechanisms: gssapi cram-md5 verbose: yes debug: yes debug_passwords: yes passdb: driver: od userdb: driver: od args: partition=/etc/dovecot/partition_map.conf enforce_quotas=no socket: type: listen master: path: /var/run/dovecot/auth-master mode: 384 user: _dovecot group: mail plugin: quota_warning: storage=100%% /usr/libexec/dovecot/quota-exceeded.sh quota: maildir:User quota sieve: /var/spool/imap/dovecot/sieve-scripts/%u/dovecot.sieve

4 6

Re: [Dovecot] Index file (date timestamp) issue on OS X 10.6.2 Server
by Darren Latter 13 Nov '09

13 Nov '09

Squirrelmail operates fine no date/time issues - it's the only bit that works without a problem :) On 13 Nov 2009, at 21:00, Bruce Bodger wrote: > Right... I wasn't thinking of either Postfix or Dovecot, I was thinking that the program that was used to create the actual message may be squirrelmail or some other phpmailer-like affair. > > Good luck, > Bruce > > On Nov 13, 2009, at 2:49 PM, Darren Latter wrote: > >> Hi Bruce, >> >> OS X 10.6 Server uses Postfix and Dovecot so no PHP that I'm aware of - but thanks for the thought! >> I'm wondering if Apple have "enhanced" Dovecot for XSAN clustering/integration? I know that there are several parameters in the dovecot.conf file (mail file locations, index status) that are overridden by other Apple files. >> >> >> >> On 13 Nov 2009, at 20:23, Bruce Bodger wrote: >> >>> >>> On Nov 13, 2009, at 2:15 PM, Darren Latter wrote: >>> >>>> Volumes of emails arriving - hits either server, some will be correctly received with date/time, others time stamped with 8 July 2037, 23:53 >>>> Same server could give either the correct or the 2037 timestamp. >>> >>> It's a long shot, but are the emails that contain the errant date/time stamp being created by any php mail routine? We ask because we've seen similar issues with dates from a PEAR/Date library that's not php v5.3 compliant. >>> >>> B. Bodger >>> >> >> >

1 0

[Dovecot] vacation
by selaci selaci 13 Nov '09

13 Nov '09

3 2

[Dovecot] read/connect anvil-auth-penalty failed: EOF/Connection refused
by Pascal Volk 13 Nov '09

13 Nov '09

Since the changesets: http://hg.dovecot.org/dovecot-2.0/rev/9bec70f26637 http://hg.dovecot.org/dovecot-2.0/rev/75b48fa3aec4 there is another problem. A `dovecot stop`, while auth and auth -w are still running, logs: Nov 12 03:17:00 master: Warning: Killed with signal 15 (by pid=31656 uid=0 code=kill) Nov 12 03:17:00 auth: Error: read(anvil-auth-penalty) failed: EOF Nov 12 03:17:00 auth: Error: net_connect_unix(anvil-auth-penalty) failed: Connection refused Nov 12 03:17:00 auth: Error: read(anvil-auth-penalty) failed: EOF Nov 12 03:17:00 auth: Error: net_connect_unix(anvil-auth-penalty) failed: Connection refused This problem doesn't occur with changeset 49d92c3fa17a. Regards, Pascal -- The trapper recommends today: face1e55.0931603(a)localdomain.org

2 2

[Dovecot] Rewriting username at login
by Gerry Demaret 13 Nov '09

13 Nov '09

I am trying to make a switch from Cyrus to Dovecot which has some "historical accidents" to it that I have to deal with and ideally would like to get rid of. One of them is that about half of the existing accounts have a different format for their login. All the newer accounts have their email address as login, the old ones use a dot instead of an at: - new: user1(a)domain.tld - old: user2.domain.tld I would like to migrate away from the all-dots notation since it leads to a lot of support questions, and for that I'd like to run in a compatibility-mode for a few months. Effectively, I want to get rid of all the old users and convert them all to the new scheme, and have the username rewritten at login, so every second to last dot gets rewritten to an at. This would ensure that we have no complaints and allow our users to migrate slowly. All users are currently stored in a MySQL database for Cyrus, but this will be changed to a Dovecot-LDAP combination. Is this possible? How could I achieve this? Kind regards, Gerry.

2 1

[Dovecot] Dovecot setuid, setgid, permission denied Problem!
by "Яцко Эллад Геннадьевич (ngs)" 13 Nov '09

13 Nov '09

Hello! Please, help! I have trouble with Dovecot's Deliver utility. I don't know how to avoid errors. Let me know what additional related information do you need? 1) Its call in Exim's configure: ========================================== local_delivery_spam_transport: driver = pipe command = /usr/local/libexec/dovecot/deliver -c /usr/local/etc/dovecot/dovecot.conf -d $local_part@$domain -m Junk message_prefix = message_suffix = log_output = true delivery_date_add envelope_to_add return_path_add user = mailnull group = mail ========================================== 2) maillog output: ========================================== Nov 13 11:16:50 srvgate-msk exim[47586]: 1N8rKs-000CNW-Qu <= eyatsko(a)runoguy.ru H=main.domain.runoguy.ru [172.16.77.11] P=esmtpa A=auth_plain:eyatsko@runoguy.ru S=42548 from <eyatsko(a)runoguy.ru> for eyatsko(a)runoguy.ru Nov 13 11:16:51 srvgate-msk exim[47593]: 1N8rKt-000CNd-D2 <= eyatsko(a)runoguy.ru U=mailnull P=spam-scanned S=43507 id=E1N8rKs-000CNW-Qu(a)srvgate-msk.runoguy.ru from <mailnull(a)runoguy.ru> for eyatsko(a)runoguy.ru Nov 13 11:16:51 srvgate-msk exim[47587]: 1N8rKs-000CNW-Qu => eyatsko <eyatsko(a)runoguy.ru> R=dspam_spamscan_router T=dspam_spamscan_transport Nov 13 11:16:51 srvgate-msk exim[47587]: 1N8rKs-000CNW-Qu Completed Nov 13 11:16:51 srvgate-msk deliver(eyatsko(a)runoguy.ru): auth input: home=/var/mail/exim Nov 13 11:16:51 srvgate-msk deliver(eyatsko(a)runoguy.ru): auth input: uid=26 Nov 13 11:16:51 srvgate-msk deliver(eyatsko(a)runoguy.ru): auth input: gid=26 Nov 13 11:16:51 srvgate-msk deliver(eyatsko(a)runoguy.ru): Fatal: setgid(26(mailnull)) failed with euid=26(mailnull), gid=6(mail), egid=6(mail): Operation not permitted Nov 13 11:16:51 srvgate-msk exim[47594]: 1N8rKt-000CNd-D2 == eyatsko(a)runoguy.ru R=local_delivery_spam_router T=local_delivery_spam_transport defer (0): Child process of local_delivery_spam_transport transport returned 75 (could mean temporary error) from command: /usr/local/libexec/dovecot/deliver ========================================== 3) dovecot-mysql.conf ========================================== driver = mysql connect = host=localhost dbname=exim user=exim password=***** default_pass_scheme = PLAIN password_query = SELECT `username` as `user`, `password` FROM `users` WHERE `username` = '%n@%d' AND `active`='Y' user_query = SELECT `home`, 26 AS `uid`, 26 AS `gid` FROM `users` WHERE `username` = '%n@%d' AND `active`='Y' ========================================== 4) Owner and permissions on mailbox-directory: ========================================== /usr/local/etc/exim> ll /var/mail/exim/runoguy.ru/ total 6 drwxrwx--- 10 mailnull mail 512 Nov 13 10:40 eyatsko drwxrwx--- 5 mailnull mail 512 Nov 12 22:17 nkolobovnikova drwxrwx--- 5 mailnull mail 512 Nov 12 22:30 oyatsko /usr/local/etc/exim> ========================================== 5) Junk folder: ========================================== /usr/local/etc/exim> ll /var/mail/exim/runoguy.ru/eyatsko/ total 46 drwxrwx--- 5 mailnull mail 512 Nov 10 21:29 .Drafts drwxrwx--- 5 mailnull mail 512 Nov 10 21:34 .Junk drwxrwx--- 5 mailnull mail 512 Nov 12 17:24 .Outgoing drwxrwx--- 5 mailnull mail 512 Nov 12 14:01 .Sent drwxrwx--- 5 mailnull mail 512 Nov 12 17:24 .Trash drwxrwx--- 2 mailnull mail 1024 Nov 13 10:40 cur -rwxrwx--- 1 mailnull mail 17 Nov 10 18:47 dovecot-keywords -rw------- 1 mailnull mail 19 Nov 13 10:40 dovecot-uidlist -rwxrwx--- 1 mailnull mail 8 Nov 10 21:24 dovecot-uidvalidity -rwxrwx--- 1 mailnull mail 0 Nov 10 17:17 dovecot-uidvalidity.4af975ff -rw------- 1 mailnull mail 384 Nov 13 10:40 dovecot.index -rwxrwx--- 1 mailnull mail 16916 Nov 13 10:40 dovecot.index.cache -rw------- 1 mailnull mail 116 Nov 13 10:40 dovecot.index.log drwxrwx--- 2 mailnull mail 512 Nov 13 10:33 new -rwxrwx--- 1 mailnull mail 38 Nov 10 21:28 subscriptions drwxrwx--- 2 mailnull mail 512 Nov 13 10:33 tmp /usr/local/etc/exim> ========================================== mailnull has system uid=26, mail has system gid=26. Kind regards. Ellad G. Yatsko.

1 0

[Dovecot] Turning off "Fixed Duplicates" feature
by Jordan Tardif 13 Nov '09

13 Nov '09

Is there a way to disable this feature? Seems to be causing more harm then good right now. Without getting into too much details it is fixing the duplcates but it does not remove the old file, and the new file it creates is not marked as read like the old one was. I understand that this problem can be created by multiple rsyncs and files changing in between, but is there any way that I can just turn this feature off all together? I do not see anything in the wiki regrading settings to disable. -- Jordan Tardif DreamHost

2 8

[Dovecot] Sieve and ACL problem
by Gregory Finch 13 Nov '09

13 Nov '09

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, I've come across a problem that I can't figure out. I'm using Dovecot 1.2.6 and Sieve 0.1.13. I'm using the following sieve script to sort my incoming mail. require ["fileinto", "envelope"]; if envelope :all :is "from" "sopprde(a)newport.th.gov.bc.ca" { fileinto "Public/Weather"; } elsif envelope :all :is "from" "apache(a)ldmltd.ca" { fileinto "hwcr"; } elsif envelope :all :is "from" "weatherdirect(a)pelmorex.ca" { fileinto "Public/Weather"; } elsif envelope :all :is "from" "Drive.BC(a)gems2.gov.bc.ca" { fileinto "Public/Weather"; } elsif header :contains "List-Id" "Dovecot Mailing List" { fileinto "Dovecot"; } else { keep; } It works for saving to my private email folders, but I get a permission denied error when trying to save to a public folder. maillog - showing error Nov 12 12:26:57 app postfix/qmgr[19314]: B36E77800088: from=<weatherdirect(a)pelmorex.ca>, size=35572, nrcpt=1 (queue active) Nov 12 12:26:57 app dovecot: deliver(gfinch(a)app.ldmltd.ca): sieve: msgid=<3708845-2200911412202651769(a)pelmorex.ca>: failed to store into mailbox 'Public/Weather': Permission denied Nov 12 12:26:57 app dovecot: deliver(gfinch(a)app.ldmltd.ca): sieve: msgid=<3708845-2200911412202651769(a)pelmorex.ca>: stored mail into mailbox 'INBOX' Nov 12 12:26:57 app dovecot: deliver(gfinch(a)app.ldmltd.ca): sieve: execution of script /srv/dovecot/gfinch/.dovecot.sieve failed, but implicit keep was successful Nov 12 12:26:57 app postfix/pipe[15363]: B36E77800088: to=<gfinch(a)app.ldmltd.ca>, relay=dovecot, delay=0.66, delays=0.62/0/0/0.05, dsn=2.0.0, status=sent (delivered via dovecot service) Nov 12 12:26:57 app postfix/qmgr[19314]: B36E77800088: removed Nov 12 12:26:57 app postfix/smtpd[15365]: disconnect from mail127c0.megamailservers.com[69.49.121.237] maillog - showing working Nov 12 09:44:42 app postfix/smtpd[13094]: connect from dovecot.org[82.118.211.50] Nov 12 09:44:42 app postfix/smtpd[13094]: E08BC7800085: client=dovecot.org[82.118.211.50] Nov 12 09:44:43 app postfix/cleanup[13097]: E08BC7800085: message-id=<1258047854.3022.401.camel@timo-desktop> Nov 12 09:44:43 app postfix/qmgr[19314]: E08BC7800085: from=<dovecot-bounces+gfinch=app.ldmltd.ca(a)dovecot.org>, size=2518, nrcpt=1 (queue active) Nov 12 09:44:43 app postfix/smtpd[13094]: disconnect from dovecot.org[82.118.211.50] Nov 12 09:44:43 app dovecot: deliver(gfinch(a)app.ldmltd.ca): sieve: msgid=<1258047854.3022.401.camel@timo-desktop>: stored mail into mailbox 'Dovecot' Nov 12 09:44:43 app postfix/pipe[13099]: E08BC7800085: to=<gfinch(a)app.ldmltd.ca>, relay=dovecot, delay=0.32, delays=0.27/0.01/0/0.05, dsn=2.0.0, status=sent (delivered via dovecot service) Nov 12 09:44:43 app postfix/qmgr[19314]: E08BC7800085: removed As for the permissions, I can save messages to the public folder with no problems from my email client over IMAP, so I'm assuming the acl file is correct. dovecot-acl for Public/Weather authenticated lrs user=gfinch lrwstipekxa # 1.2.6: /etc/dovecot/dovecot.conf # OS: Linux 2.6.23.1-smp-LDM i686 Slackware 12.0.0 base_dir: /var/run/dovecot/ protocols: imap imaps managesieve ssl_ca_file: /etc/dovecot/ca.pem ssl_cert_file: /etc/dovecot/dovecot1.crt ssl_key_file: /etc/dovecot/dovecot1.key login_dir: /var/run/dovecot//login login_executable(default): /usr/local/libexec/dovecot/imap-login login_executable(imap): /usr/local/libexec/dovecot/imap-login login_executable(managesieve): /usr/local/libexec/dovecot/managesieve-login verbose_proctitle: yes first_valid_gid: 500 mail_uid: 500 mail_gid: 500 mail_location: maildir:~/Maildir:LAYOUT=fs fsync_disable: yes mail_executable(default): /usr/local/libexec/dovecot/imap mail_executable(imap): /usr/local/libexec/dovecot/imap mail_executable(managesieve): /usr/local/libexec/dovecot/managesieve mail_plugins(default): acl imap_acl mail_plugins(imap): acl imap_acl mail_plugins(managesieve): mail_plugin_dir(default): /usr/local/lib/dovecot/imap mail_plugin_dir(imap): /usr/local/lib/dovecot/imap mail_plugin_dir(managesieve): /usr/local/lib/dovecot/managesieve imap_idle_notify_interval(default): 1200 imap_idle_notify_interval(imap): 1200 imap_idle_notify_interval(managesieve): 120 namespace: type: private inbox: yes list: yes subscriptions: yes namespace: type: shared separator: / prefix: Shared/%%u/ location: maildir:%%h/Maildir:LAYOUT=fs:INDEX=~/shared/%%u list: children namespace: type: public separator: / prefix: Public/ location: maildir:/srv/dovecot/public:LAYOUT=fs:INDEX=~/public list: children lda: postmaster_address: postmaster(a)ldmltd.ca mail_plugins: acl sieve fsync_disable: no auth default: mechanisms: plain login digest-md5 cram-md5 passdb: driver: passwd-file args: username_format=%Ln /etc/dovecot/passwd userdb: driver: static args: uid=500 gid=500 home=/srv/dovecot/%Ln socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix master: path: /var/run/dovecot/auth-master mode: 384 user: vmail plugin: acl: vfile:/etc/dovecot/acls:cache_secs=300 acl_shared_dict: file:/etc/dovecot/shared/mailboxes sieve: ~/.dovecot.sieve sieve_dir: ~/sieve I don't know what I missed in the config, as everything else works perfectly. Thank you, - -Greg -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAkr8jEwACgkQeflWWP27iA+UQgCgni3jztUw6PRCH9Z1tljVbv09 dQ8AnjBx+cYEmSfiZzTItbR/ZsmGcQQi =WzVp -----END PGP SIGNATURE-----

2 2

[Dovecot] Deliver and file system quota
by Rainer Frey 13 Nov '09

13 Nov '09

Hi, what is the quota plugin for deliver supposed to do when using fs quota? With IMAP, and not using noenforcing, a user that is over Soft limit can't copy mails. With deliver, the mail is delivered normally. When hard limit is exceeded, there is an error "rejected: Not enough disk space", just like when I don't use the plugin in lda. Even the lda setting "quota_full_tempfail = yes" works without the plugin configured in lda section. So is there any effect of the quota plugin in lda with file system quota? Thanks Rainer

2 1