- dovecot - dovecot.org

[Dovecot] offlineimap with dovecot and sieve
by Dieter Faulbaum 29 May '09

29 May '09

I have a dumb question, is it possible to use this combination: Synchronising a remote IMAP-server and a local dovecot-IMAP-server by offlineimap (with both types = IMAP), which works very well. But it seems, that my sieve-scripts on the local dovecot server are not recognised by this combination. Is there a good debugging way for this? -- Dieter Faulbaum Elektronenspeicherring BESSY II Albert-Einstein-Str. 15, 12489 Berlin phone +49 30 6392-4652 fax +49 30 6392-2939 mail Dieter.Faulbaum(a)bessy.de

5 5

[Dovecot] LDAP (AD) auth problem
by Misha Volodko 29 May '09

29 May '09

I'm trying to authenticate users using MS AD with auth_bind option. Here is my config file: # 1.0.15: /etc/dovecot/dovecot.conf log_timestamp: %Y-%m-%d %H:%M:%S protocols: imaps ssl_cert_file: /etc/dovecot/ssl/cert.pem ssl_key_file: /etc/dovecot/ssl/key.pem disable_plaintext_auth: no verbose_ssl: yes login_dir: /var/run/dovecot/login login_executable: /usr/lib/dovecot/imap-login mail_privileged_group: mail mail_location: maildir:~/Maildir mail_debug: yes mail_plugins: acl auth default: verbose: yes debug: yes debug_passwords: yes passdb: driver: ldap args: /etc/dovecot/dovecot-ldap.conf userdb: driver: ldap args: /etc/dovecot/dovecot-ldap.conf plugin: acl: vfile content of dovecot-ldap.conf hosts = myhost:389 auth_bind = yes auth_bind_userdn = cn=%n,ou=People,dc=company,dc=com base = ou=People,dc=company,dc=com user_attrs = mailNickname=home user_filter = (&(objectClass=user)(sAMAccountName=%n)) user_global_uid = vmail user_global_gid = vmail Using the same options I can fetch info with ldapsearch ldapsearch -h myhost -b 'dc=company,dc=com' -D 'cn=username,ou=People,dc=company,dc=com' -x -W '(&(objectClass=user)(sAMAccountName=username))' Dovecot doesn't work with this setting, shows in log: dovecot: auth(default): ldap(username,10.131.11.147): ldap_search() failed: Operations error Using tcpdump i found a cause of it, seems dovecot binds to AD server, then drop connection and trying to do search without bind. During sniff I see response to my ldap search - LdapErr: DSID-0C090627, comment: In order to perform this operation a successful bind must be completed on the connection Found similar problem in maillist - without solution. http://markmail.org/message/a6pui34ewb5bd55d Kindly asking what to do with it? :) -- Best Regards

2 6

[Dovecot] locking fails
by Oskar Eyb 29 May '09

29 May '09

hello! on one of my servers (freebsd 7.0-R , Jail) I have a very strange problem I guess its something about LOCKing. some programs have issued with locking: saslauthd[38127] :main : could not lock pid lock file: /var/run/saslauthd/saslauthd.pid.lock saslauthd[38127] :main : fcntl: Invalid argument dovecot: 2009-05-29 03:45:50 Info: dovecot v1.1.15 starting up dovecot: 2009-05-29 03:45:50 Info: Generating Diffie-Hellman parameters for the first time. This may take a while.. dovecot: 2009-05-29 03:45:50 Error: ssl-build-param: fcntl(write-lock) locking failed for file /var/db/dovecot/ssl-parameters.dat.tmp: Invalid argument dovecot: 2009-05-29 03:45:50 Fatal: ssl-build-param: file_try_lock(/var/db/dovecot/ssl-parameters.dat.tmp) failed: Invalid argument deliver(user(a)example.com): 2009-05-29 03:43:24 Error: fcntl(write-lock) locking failed for file /data/maildirs/example.com/user/dovecot.index.log: Invalid argument deliver(user(a)example.com): 2009-05-29 03:43:24 Error: mail_index_wait_lock_fd() failed with file /data/maildirs/example.com/user/dovecot.index.log: Invalid argument deliver(user(a)example.com): 2009-05-29 03:43:24 Info: msgid=<BLU129-W212F3C73CDDC4C399CE338FD510(a)phx.gbl>: save failed to INBOX: Internal error occurred. Refer to server log for more information. [2009-05-29 03:43:24] -rw------- 1 vmail vmail 24 May 29 03:43 /data/maildirs/example.com/user/dovecot.index.log all directorys are existent and wirtable I`m not sure if this only affects dovecot..maybe its a issue caused of the OS. anyone an idea? maybe its possible to run dovecot without these locking? thanks!! Oskar -- Nur bis 31.05.: GMX FreeDSL Komplettanschluss mit DSL 6.000 Flatrate und Telefonanschluss nur 17,95 Euro/mtl.!* http://portal.gmx.net/de/go/dsl02

2 5

[Dovecot] (no subject)
by Patrick Hemmen 29 May '09

29 May '09

Hi, I use a OpenLDAP for authentication. To authenticate a full DN as the user name must be used, like "cn=jim,ou=users,dc=example,dc=com". There are several domains, like example2.com and example3.com. I want to use Dovecot with ldap and authentication binds. For testing I use "auth_bind_userdn = cn=%n,ou=users,dc=%d" and the user name must provide as "jim@example,dc=com". To allow the special chars ("=,") in user name, I extend "auth_username_chars". Now my questions. Exists a real chance to attack the ldap directory with the extended "auth_username_chars"? And it's possible to use authentication binds with the regular "auth_username_chars" and a provided user names like "jim(a)example.com" in my special ldap directory structure? Thanks in advance - Patrick

2 3

[Dovecot] Clustering dovecot?
by dovecot＠corwyn.net 29 May '09

29 May '09

Currently I have a mail server running postfix and dovecot with users in mysql. I have Outlook (blich) clients checking IMAP mail on the server. I'd like to build some fault-tolerance into that system in case I have hardware failure. I've read through: http://wiki.dovecot.org/MailLocation/SharedDisk but I feel I need more information. My basic understanding is that I'll need 2 clustered systems running with shared disk space and shared IP. Performance/load-balancing isn't an issue for me, it's just fault-tolerance that I'm worried about. I found a nice long doc for Cyrus IMAP (http://cyrusimap.web.cmu.edu//ag.html) anything similar for dovecot? Rick Rick Steeves http://www.sinister.net "The more I learn, it seems, the less I know." Frazz

7 15

[Dovecot] expire: mysql table creation error
by John Fawcett 29 May '09

29 May '09

Don't know if anyone found this already (couldn't see anything in the archives about it) but maybe this is useful to someone else who finds the same problem. When following the instructions for setting up expire on v1.2+ for mysql backend at http://wiki.dovecot.org/Plugins/Expire I got the following error: mysql> CREATE TABLE expires ( -> username varchar(100) not null, -> mailbox varchar(255) not null, -> expire_stamp integer not null, -> primary key (username, mailbox) -> ); ERROR 1071 (42000): Specified key was too long; max key length is 1000 bytes that's because it's a utf8 database where every char is 3 bytes so a 355 char index is 1065 bytes. it worked ok with the following modification: mysql> CREATE TABLE expires ( -> username varchar(100) not null, -> mailbox varchar(255) not null, -> expire_stamp integer not null, -> primary key (username, mailbox(200)) -> ); Query OK, 0 rows affected (0.00 sec) but maybe that's not such a good primary key, probably better to do: mysql> CREATE TABLE expires ( -> id integer not null auto_increment, -> username varchar(100) not null, -> mailbox varchar(255) not null, -> expire_stamp integer not null, -> primary key (id), -> key (username, mailbox(200)) -> ); Query OK, 0 rows affected (0.00 sec) John

2 2

[Dovecot] dovecot: child xxxx (login) returned error 83 (Out of memory)
by Eric Sammons 29 May '09

29 May '09

Hi, Recently started receiving the error $SUBJECT. Soon after a number of segfault errors are reported for pop3-login. Based on my configuration, I believe I am set up to receive core files; however, my ulimit -c is 0. I have tried setting ulimit -c ... in /etc/init.d/dovecot and I have tried modifying /etc/security/limits.conf. In all cases /proc/[pid]/limits continued to report that my ulimit -c value was 0. What is the best process for capturing a core file from a login process (pop3-login). I have found some similar hits on the web for this; however, none appear to lead to resolution and in most cases the implementation includes imap, mysql, etc... Here is my dovecot.conf, any insight into the cause of this problem is greatly appreciated. Dovecot package is that shipped with RHEL 5.2 (dovecot-1.0.7-2.el5). <dovecot.conf> protocols = pop3 pop3s listen = * shutdown_clients = yes #log_path = /var/log/pop.log #info_log_path = /var/log/popinfo.log syslog_facility = local6 ssl_disable = no ssl_cert_file = /etc/pki/dovecot/certs/pop.pem ssl_key_file = /etc/pki/dovecot/private/pop.pem login_dir = /var/run/dovecot/login login_user = dovecot login_process_size = 64 login_process_per_connection = no login_processes_count = 3 login_max_connections = 512 login_max_processes_count = 512 max_mail_processes = 10000 login_greeting = Unauthorized access is prohibited. mail_location = mbox:/var/indexes/%u:INBOX=/var/spool/mail/%u mail_privileged_group = vmail pop3_lock_session = yes ######added for perfomance 61208 MT (Just for testing) # test with and without the following pop3_no_flag_updates = yes mmap_disable = yes mbox_read_locks = fcntl mbox_write_locks = fcntl mbox_lock_timeout = 300 #mbox_dirty_syncs = yes mbox_very_dirty_syncs = yes mbox_lazy_writes = yes mbox_min_index_size = 540 protocol imap { } protocol pop3 { pop3_uidl_format = %08Xv%08Xu } protocol lda { postmaster_address = postmaster(a)example.com } auth default { auth_cache_size = 10240 auth_cache_ttl = 18000 auth_debug=no mechanisms = plain passdb ldap { args = /etc/dovecot-ldap.conf } userdb ldap { args = /etc/dovecot-ldap.conf } auth_verbose = no } dict { } plugin { } ### The following added to troubleshoot segfault issue 6.16.08 by rt mail_drop_priv_before_exec = yes </dovecot.conf>

2 1

[Dovecot] Timeout during imapsync
by Craig Jackson 29 May '09

29 May '09

Hi, I'm using Imapsync to sync messages from an Exchange 2003 server to a Dovecot 1.1.11 server. The problem is that users' mailboxes are huge, several gigabytes with tens of thousands of messages. First Imapsync connects to Exchange and then to Dovecot, and then starts to get Inbox info from Exchange. By the time it gets this info, the connection to Dovecot has timed out. I realize the RFC calls for a 30 minute time out which I believe is hard coded into Dovecot. If there is a way around this by making a configuration change, please tell me. I have posted the same message on the Imapsync list in an attempt to find a work around with patched Imapsync. Thanks in advance. Craig Jackson

2 2

[Dovecot] plugin API docs?
by Dave McGuire 29 May '09

29 May '09

Is there any documentation for the plugin API? A cursory glance through the docs didn't turn up anything. Thanks, -Dave -- Dave McGuire Port Charlotte, FL

2 2

[Dovecot] dbox verses maildir - advantages/disadvantages
by James Brown 29 May '09

29 May '09

I am migrating our mail server from Courier-IMAP to Dovecot. We currently use maildir storage format. What are the advantages and disadvantages of Dovecot's dbox format over maildir? Does anyone have any performance benchmarks for both? What do people use to test performance? We are running on a Mac OS X box (10.5.7) using Postfix 2.6. Thanks, James.

2 1