- dovecot - dovecot.org

[Dovecot] Testing 1.2
by Marc Perkel 28 May '09

28 May '09

Just installed it. Upgraded from 1.1.15. So far so good.

2 1

[Dovecot] test of mailing list
by Carlos Xavier 27 May '09

27 May '09

Im sendding messages to the list and they do not show up. its just a test, please ignore Regards, Carlos Xavier.

5 4

[Dovecot] RFC 3501 section 7
by Scott Haneda 27 May '09

27 May '09

Hello, been lurking a while, about to move over to Dovecot soon. I have a nice test machine up and running. My previous email server when talking IMAP to Apple Mail, will eventually go "deaf" and new messages will not make it to the Inbox of Apple Mail Client. A restart of the desktop application is required. I am told that the reason for this is that my current email server adheres to RFC 3501, specifically section 7, the second paragraph of which says: The client MUST be prepared to accept any response at all times. Apparently, Apple Mail is not adhering to that, and my email server is sending out that type of response. However, I look at this list, for which I am not entirely sure how accurate the actual test is: http://www.imapwiki.org/ImapTest/ServerStatus It lists Dovecot as one of only two that are fully compliant IMAP servers. Congrats on that. My questions are: Does Dovecot in fact support correctly the above mentioned RFC and subsection? I assume so. That being the case, I have not had issues in my testing of Dovecot, nor heard reports of Apple Mail and IMAP having any significant problems. How, if that is the case, can Apple Mail and Dovecot work well with each other, and my current email server is not able to? My primary reason for moving to Dovecot is to not be burdened by this issue, as well as have what I consider to be a more advanced storage mechanism for the actual messages. What I would like to avoid, is spending a lot of time migrating thousands of users to a new system, to only have them burdened by the same inability to have email come to them without an application relaunch. Thank you for any insight on this. * I have filed a bug report with Apple, which was accepted. Their system does not allow me to see the status on the report once it has been closed. -- Scott * If you contact me off list replace talklists@ with scott@ *

2 1

[Dovecot] Dovecot and Phpgroupware compatibility
by Carlos Xavier 27 May '09

27 May '09

Hi, I am resending this email, since the fist one didn't hit the list. Recently we moved our server from mbox format to Maildir format and started using Dovecot. Almost all the users are very happy with this, since the speed had increased very much. I used mb2md to do the conversion and on this task all the mailboxes that had "." (dot) on their names were converted to "_". But there is one issue with this, we also use the webmail that comes with Phpgroupware, and it uses some mailbox that have fixed named like INBOX.Sent, INBOX.Draft and so on. When their names were changed the sent messages didn't get saved anymore, so I had to move them back to the old names. After that the sent messages returned to be saved again, but another trouble showed up. As they start with .INBOX and have "." on the names, Dovecot shown them as a subdirectory of the INBOX and we got some people upset with this. I need help on configuring Dovecot to not show them this way, because if you reed the .INBOX.Sent either on the webmail or by Outlook, the field displayed is the sender, witch is not desired. When I did the conversion, to keep the compatibility with the old server (quota, avoid I/O bottleneck, etc), I set two Maildirs, one at /var/spool/mail/$USER, to be the INBOX and another at the user home. We are using Dovecot version 1.1.13, and below is the relevant configuration on use. namespace public { prefix = "#mbox/" separator = / inbox = yes list = no location= maildir:/var/spool/mail/%u/:CONTROL=~/control:INDEX=~/control } namespace private { separator = / prefix = location= maildir:~/Maildir/:CONTROL=~/control:INDEX=~/control inbox = no } Best Regards, Carlos Xavier.

2 1

[Dovecot] setgid error
by Roy Sigurd Karlsbakk 27 May '09

27 May '09

Hi all Trying to setup dovecot with mysql and postfix, I have configured it as given below. thecot user has the dovecot group as primary, and is also a member of mail and dovecot-users. Still, it can't setgid to dovecot-users. I tried changing the shell for the dovecot user to something useful and chmod'ing a file to dovecot-users, and it work well. Still, no mail comes through and dovecot gives me this error deliver(roy(a)somedomain.com): 2009-05-23 15:02:52 Fatal: setgid(115) failed with euid=115, gid=114, egid=114: Operation not permitted Any ideas? roy # Dovecot config # 1.0.15: /etc/dovecot/dovecot.conf log_path: /var/log/dovecot/dovecot.log log_timestamp: %Y-%m-%d %H:%M:%S disable_plaintext_auth: no verbose_ssl: yes login_dir: /var/run/dovecot/login login_executable: /usr/lib/dovecot/imap-login verbose_proctitle: yes mail_privileged_group: mail mail_location: maildir:/var/spool/dovecot/%d/%n auth default: default_realm: eventchief.com verbose: yes debug: yes passdb: driver: sql args: /etc/dovecot/dovecot-sql.conf userdb: driver: sql args: /etc/dovecot/dovecot-sql.conf socket: type: listen master: path: /var/run/dovecot/auth-master mode: 432 user: dovecot group: mail -- Roy Sigurd Karlsbakk (+47) 97542685 / 98013356 roy(a)karlsbakk.net http://blogg.karlsbakk.net/ -- I all pedagogikk er det essensielt at pensum presenteres intelligibelt. Det er et elementært imperativ for alle pedagoger å unngå eksessiv anvendelse av idiomer med fremmed opprinnelse. I de fleste tilfeller eksisterer adekvate og relevante synonymer på norsk.

2 6

Re: [Dovecot] Capability problems dovecot 2.0
by reg9009 27 May '09

27 May '09

answered the wrong address... Timo Sirainen schrieb: > On May 27, 2009, at 2:35 AM, reg9009 wrote: > >> what if TB just needs the "IMAP4rev1" capability before logging in? > > That's a completely different issue. Meaning that v2.0 is buggy here > currently and returning an empty string, because I haven't yet decided > how to fix it. That explains all :) I'll try imap_capability manual override for now. Btw., when I telnet to the server, I get * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE AUTH=PLAIN AUTH=LOGIN AUTH=DIGEST-MD5 AUTH=CRAM-MD5] Dovecot ready. What's this capability string? Couldn't we use this one, at least until a user is logging in? > >> Where is the setting "imap_capability" used? I could try and see how TB >> is behaving, in parallel to Outlook, OE, etc. > > What do you mean by used? You should be able to just set in dovecot.conf: > > imap_capability = imap4rev1 and other stuff > > I didn't know if that shoul be used in some section or directly in dovecot.conf. Thx. Regards, Sebastian

1 0

[Dovecot] [bug] dovecot 1.1.15: segfault after message move
by Juergen Daubert 27 May '09

27 May '09

Hello, found the following in my error log: May 20 13:27:48 ser dovecot: imap-login: Login: user=<juergen>, method=PLAIN, rip=192.168.0.17, lip=192.168.0.90, TLS May 20 13:28:10 ser dovecot: Panic: IMAP(juergen): file imap-sync.c: line 439 (cmd_sync_delayed): assertion failed: (client->mailbox != NULL) May 20 13:28:10 ser dovecot: IMAP(juergen): Raw backtrace: imap [0x80cc01e] -> imap [0x80cc08a] -> imap [0x80cba78] -> imap [0x806642f] -> imap [0x80602c1] May 20 13:28:10 ser dovecot: child 23536 (imap) killed with signal 6 (core dumps disabled) it's almost always reproducible using the Heirloom mailx [1] mail client, with mutt I get a 'connection closed' message but no segfault: - login to the dovecot server via imap/imaps - move a message from INBOX to a another large mbox-file - quit Seems to be a new issue introduced with 1.1.15 because I don't see that with 1.1.14 or older versions. Greetings Juergen [1] http://heirloom.sourceforge.net/mailx.html #:> dovecot -n # 1.1.15: /etc/dovecot.conf # OS: Linux 2.6.27.23 i686 base_dir: /var/run/dovecot/ protocols: imap imaps pop3 pop3s ssl_cert_file: /etc/ssl/certs/dovecot.crt ssl_key_file: /etc/ssl/keys/dovecot.key disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable(default): /usr/lib/dovecot/imap-login login_executable(imap): /usr/lib/dovecot/imap-login login_executable(pop3): /usr/lib/dovecot/pop3-login login_process_per_connection: no login_processes_count: 1 first_valid_gid: 100 mail_location: mbox:~/Mail:INBOX=/var/spool/mail/%u mbox_min_index_size: 100 mbox_very_dirty_syncs: yes mail_executable(default): /usr/lib/dovecot/imap mail_executable(imap): /usr/lib/dovecot/imap mail_executable(pop3): /usr/lib/dovecot/pop3 mail_plugin_dir(default): /usr/lib/dovecot/modules/imap mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap mail_plugin_dir(pop3): /usr/lib/dovecot/modules/pop3 auth default: passdb: driver: shadow userdb: driver: passwd -- Juergen Daubert | mailto:jue@jue.li Korb, Germany | http://jue.li/crux

6 16

[Dovecot] example sql acl_shared_dict wiki
by Robert Schetterer 27 May '09

27 May '09

Hi Timo, wiki says --------- Shared mailbox listing ..... You could use any dictionary backend, such as SQL or Berkeley DB, but a simple flat file should work pretty well too: plugin { acl_shared_dict = file:/var/lib/dovecot/shared-mailboxes.db } .... -------- could you include an example for having acl_shared_dict in sql ? -- Best Regards MfG Robert Schetterer Germany/Munich/Bavaria

2 6

[Dovecot] FTS Plugin design
by Rui Carneiro 26 May '09

26 May '09

Hi all, Currently I am developing some changes on the solr plugin. I want this plugin indexing also the attachment's content. I have already started to look on plugin's source but I am having some problems understanding how it works. I didn't understood yet what is the plugin's design and how the plugins are called from the core system and I was wondering if anyone could help me with that. Sorry if this doubts sound stupid but I am newcomer on Dovecot. Regards, Rui Carneiro

5 31

[Dovecot] Secure Sockets Layer client certificate authentication
by Stephen Feyrer 26 May '09

26 May '09

Hi everyone. Please note, I've asked a very similar question before and I apologize for sounding like a broken record. Well here it goes. What I want to do is authenticate my users using a certificate. Thereby authenticating both the user and server with strong tokens that are centrally managed. In the worst case scenario the user should only need to enter a password for the certificate store and then the certificate should trigger the appropriate level of access to their account. Is Dovecot the correct tool for the job? If yes then, how? Else if not, then what would you recommend? I have tried setting the auth mechanism to anonymous without any joy. My password file is set with nopassword. All my certificates work well with the Secure Sockets Layer system. This is the configuration I am currently running: # 1.2.beta1: /opt/etc/dovecot/dovecot.conf # OS: Linux 2.6.12.6-arm1 armv5tejl log_path: /opt/var/log/dovecot.log info_log_path: /opt/var/log/dovecot-info.log protocols: imaps ssl_ca_file: /opt/etc/ssl.ca/cacrl.pem ssl_cert_file: /opt/etc/ssl.ca/newcerts/imap.cer ssl_key_file: /opt/etc/ssl.ca/private/imap.key ssl_parameters_regenerate: 24 ssl_cipher_list: ALL:!LOW:!SSLv2 ssl_verify_client_cert: yes disable_plaintext_auth: yes verbose_ssl: yes login_dir: /opt/var/run/dovecot/login login_executable: /opt/libexec/dovecot/imap-login login_user: guest login_processes_count: 2 login_max_processes_count: 4 mbox_write_locks: fcntl mail_process_size: 512 imap_client_workarounds: outlook-idle tb-negative-fetch auth default: user: admin verbose: yes debug: yes ssl_require_client_cert: yes ssl_username_from_cert: yes passdb: driver: passwd-file args: /opt/etc/dovecot/h.org/passwd userdb: driver: passwd This is a log of a login attempt: dovecot: May 25 11:55:58 Info: auth(default): new auth connection: pid=22556 dovecot: May 25 11:56:08 Info: imap-login: Valid certificate: /O=home.org/emailAddress=admin(a)nas2.h.org/L=W/ST=C/C=G/CN=h.org dovecot: May 25 11:56:08 Info: imap-login: Valid certificate: /C=G/ST=C/O=h.org/OU=K F/CN=k dovecot: May 25 11:56:10 Info: auth(default): new auth connection: pid=22585 dovecot: May 25 11:56:16 Info: auth(default): client in: AUTH 1 PLAIN service=imap secured valid-client-cert cert_username=k lip=10.1.1.245 rip=10.1.1.1 lport=993 rport=53430 dovecot: May 25 11:56:16 Info: auth(default): client out: CONT 1 dovecot: May 25 11:56:16 Info: auth(default): client in: CONT<hidden> dovecot: May 25 11:56:16 Info: auth(default): passwd-file(k,10.1.1.1): lookup: user=k file=/opt/etc/dovecot/h.org/passwd dovecot: May 25 11:56:16 Info: auth(default): passwd-file(k,10.1.1.1): No password dovecot: May 25 11:56:16 Info: auth(default): client out: OK 1 user=k dovecot: May 25 11:56:16 Info: auth(default): master in: REQUEST 6 22164 1 dovecot: May 25 11:56:16 Info: auth(default): passwd(k,10.1.1.1): lookup dovecot: May 25 11:56:16 Info: auth(default): master out: USER 6 k system_user=k uid=500 gid=100 home=/ dovecot: May 25 11:56:16 Info: imap-login: Login: user=<k>, method=PLAIN, rip=10.1.1.1, lip=10.1.1.245, TLS With this configuration the client will connect over ssl and identify itself with a certificate but a client password is still required. -- Regards Stephen.

3 8