- dovecot - dovecot.org

[Dovecot] dovecot 1.1.11 errors
by Stéphane Cottin 04 Mar '09

04 Mar '09

Hi, I sometimes got the following log entries with dovecot 1.1.11 : mail.err: Feb 27 10:06:54 dovecot: IMAP(hidden(a)email.com): write(dnotify pipe) failed: Bad file descriptor mail.err: Feb 27 10:06:54 dovecot: IMAP(hidden(a)email.com): close(dnotify pipe[0]) failed: Bad file descriptor mail.err: Feb 27 10:06:54 dovecot: IMAP(hidden(a)email.com): close(dnotify pipe[1]) failed: Bad file descriptor [...] mail.err: Feb 27 10:17:55 dovecot: child 18656 (imap) returned error 82 (Internal logging error) any thougths ? Stéphane Cottin

3 2

[Dovecot] problems with dotlock
by Mark Hedges 04 Mar '09

04 Mar '09

I have to make dotlock work because this openwebmail thing only supports one of dotlock or flock, but procmail delivery does dotlock and fcntl. procmail correctly creates a dotlock file in /var/spool/mail/username.lock when delivering, I can watch this with `while :; do ls -la | grep lock; done`. It works fine when lock_method=fcntl, but no dotlock file shows up in /var/spool/mail. mbox_write_locks are working correctly with mbox_write_locks = dotlock fcntl, the dotlock file shows up in the user's mail directory. However, dotlocking /var/spool/mail doesn't work: $ ls -la /var/spool/mail total 44 drwxrwxr-x 2 root mail 4096 Feb 25 17:39 . $ grep mail_privileged_group /etc/mail/dovecot.conf mail_privileged_group = mail Feb 25 17:45:45 anubis dovecot: POP3(despam_test_anubis): Effective uid=511, gid=100 Feb 25 17:45:45 anubis dovecot: POP3(despam_test_anubis): mbox: data=/home/anubis/despam_test_anubis/mail:INBOX=/var/spool/mail/despam_test_anubis Feb 25 17:45:45 anubis dovecot: POP3(despam_test_anubis): mbox: root=/home/anubis/despam_test_anubis/mail, index=/home/anubis/despam_test_anubis/mail, inbox=/var/spool/mail/despam_test_anubis Feb 25 17:45:45 anubis dovecot: POP3(despam_test_anubis): file_lock_dotlock() failed with mbox file /var/spool/mail/despam_test_anubis: Permission denied Feb 25 17:45:45 anubis dovecot: POP3(despam_test_anubis): Couldn't open INBOX: Internal error occurred. Refer to server log for more information. [2009-02-25 17:45:45] Feb 25 17:45:45 anubis dovecot: POP3(despam_test_anubis): Couldn't open INBOX top=0/0, retr=0/0, del=0/0, size=0 Feb 25 17:45:45 anubis dovecot: pop3-login: Login: user=<despam_test_anubis>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured gid=100 = group 'users'. I tried making all of the binaries root:mail with g+s, same as /usr/bin/lockfile, but this was no help. It also does not help to chmod +t /var/spool/mail. $ dovecot --version 1.0.7 kernel 2.6.18-92.1.22.el5 centos mmap_disable = yes (req'd for ~/mail dotlocks, makes no difference either way for /var/spool/mail) Any ideas? Thanks, Mark

6 34

[Dovecot] GSSAPI cross-realm still broken
by Bryan Jacobs 03 Mar '09

03 Mar '09

I've been trying to track down some problems with Dovecot in a Kerberos 5 cross-realm environment, and there seem to be a few issues. LOGIN/PLAIN work fine using pam_krb5, but GSSAPI is a bit harder to handle. On line 436 of src/auth/mech-gssapi.c, the authn_name and the authz_name are compared using gss_compare_name. This dates back to the message at: http://dovecot.org/pipermail/dovecot/2005-October/009615.html While everything within that message is true, as things stand, Dovecot is unusable in a cross-realm environment. When cross-realm tickets are used, the authn_name is "username@REALM" and the authz_name is "username" (or vice versa, I don't remember). The attached patch causes dovecot to display these two values in human-readable format to illustrate the issue. Because these two GSS names differ, Dovecot refuses to allow access in spite of the fact that krb5_kuserok would return TRUE. I am not the only one to have noticed this problem: http://dovecot.org/pipermail/dovecot/2007-July/023868.html http://dovecot.org/pipermail/dovecot/2007-October/026027.html Might I suggest that some more robust security checking be done instead of abusing gss_compare_name like this? I don't know how to do this using GSSAPI, but on the Kerberos side Heimdal provides the function krb5_kuserok. Dovecot could also just have a configurable file listing acceptable krb5 principals (preferably in .k5login syntax) and check that both auth_name and authz_name are in the list. Bryan Jacobs

1 0

[Dovecot] Anyone know or have a perl, c/c++ script?
by Brandon Lamb 03 Mar '09

03 Mar '09

Hello all, Im hoping maybe someone on this list has already looked for or built something similiar. Basically from what I can tell, phps imap libraries or whatever dont support setting custom keywords. So I am wondering if someone has a library or script that can take a username, domain, password, folder, uid and flag to set so that my webmail app can call this to set imap keywords. So far my google searching isnt turning up anything, but searching for the word keyword doesnt really help.

1 1

[Dovecot] Seperate auth per protocol (pop3/imap)
by Guy 03 Mar '09

03 Mar '09

Hi, During discussions with the boss we've speculated about having users having only specific services available. One of the ideas was to have users being able to specify if they wanted POP3 or IMAP and whether we could limit their access to one or the other server side. We use MySQL for the userdb and passdb lookups at the moment. Is it possible to specify separate auth files with different MySQL lookups per protocol? Thanks Guy -- Don't just do something...sit there!

2 1

[Dovecot] under load
by Mohsen Pahlevanzadeh 03 Mar '09

03 Mar '09

Dear all, If you have a IMAP or pop3 server under load with vpopmail, can you mail me dovecot.conf ? Yours, Mohsen

1 1

[Dovecot] dovecot imap and thunderbird tags
by Lorenzo Bettini 02 Mar '09

02 Mar '09

We've been using an imap(s) dovecot server for a while on an ubuntu 8.04.2 and we noted that tags set by thunderbird ("important", "to do", etc.) are almost always lost, i.e., when connecting to the same imap account from another machine, the tags are not there anymore... this always happens for the Inbox, and seldomly for other imap folders... anyone else experiencing this? Note that the same problem does not arise with other imap server accounts... thanks in advance Lorenzo -- Lorenzo Bettini, PhD in Computer Science, DI, Univ. Torino ICQ# lbetto, 16080134 (GNU/Linux User # 158233) HOME: http://www.lorenzobettini.it MUSIC: http://www.purplesucker.com http://www.myspace.com/supertrouperabba BLOGS: http://tronprog.blogspot.com http://longlivemusic.blogspot.com http://www.gnu.org/software/src-highlite http://www.gnu.org/software/gengetopt http://www.gnu.org/software/gengen http://doublecpp.sourceforge.net

3 7

[Dovecot] an intresting problem
by Mohsen Pahlevanzadeh 02 Mar '09

02 Mar '09

Dear all, I have compiled dovecot.When i use dovecot --build-options , i receive following messages: ------------------------------------------------ debian:/home/mohsen# dovecot --build-options Build options: ioloop=epoll notify=inotify ipv6 openssl Mail storages: maildir mbox dbox cydir raw SQL drivers: Passdb: checkpassword vpopmail Userdb: prefetch static vpopmail ------------------------------------------------------- Also i have vpopmail & installed it to /home/vpopmail I added joojoo domain. & postmaster@joojoo user. When i use mysql vpopmail,and use select pw_domain,pw_name,pw_clear_password from vpopmail; Then i see following message: +------------+------------+-----------------+ | pw_domain | pw_name | pw_clear_passwd | +------------+------------+-----------------+ | joojoo | postmaster | 123456 | | final.com | postmaster | 123456 | | janjan.com | postmaster | 123456 | | final.com | mohsen | 123456 | | final.com | kamal | 123456 | +------------+------------+-----------------+ When i use `telnet 0 110` i see following message plus my command: debian:/home/mohsen# telnet 0 110 Trying 0.0.0.0... Connected to 0. Escape character is '^]'. +OK Dovecot ready. user postmaster@joojoo +OK pass 123456 -ERR Authentication failed. ^] telnet> quit Connection closed. ///////////////////////// Then i see my log file & saw following messages: ////////////////////////////////////////////////// dovecot: Mar 02 20:10:23 Info: auth(default): new auth connection: pid=2657 dovecot: Mar 02 20:10:39 Info: auth(default): client in: AUTH 1 PLAIN service=pop3 secured lip=127.0.0.1 rip=127.0.0.1 lport=110 rport=38239 resp=AHBvc3RtYXN0ZXJAam9vam9vADEyMzQ1Ng== dovecot: Mar 02 20:10:39 Info: auth(default): checkpassword(postmaster(a)joojoo,127.0.0.1): execute: /home/vpopmail/bin/vchkpw /usr/local/libexec/dovecot/checkpassword-reply dovecot: Mar 02 20:10:39 Info: auth(default): checkpassword(postmaster(a)joojoo,127.0.0.1): Received no input dovecot: Mar 02 20:10:39 Info: auth(default): checkpassword(postmaster(a)joojoo,127.0.0.1): exit_status=3 dovecot: Mar 02 20:10:39 Info: auth(default): checkpassword(postmaster(a)joojoo,127.0.0.1): Login failed (status=3) dovecot: Mar 02 20:10:39 Info: auth(default): vpopmail(postmaster(a)joojoo,127.0.0.1): lookup user=postmaster domain=joojoo dovecot: Mar 02 20:10:39 Info: auth(default): vpopmail(postmaster(a)joojoo,127.0.0.1): unknown user dovecot: Mar 02 20:10:41 Info: auth(default): client out: FAIL 1 user=postmaster@joojoo dovecot: Mar 02 20:10:53 Info: pop3-login: Disconnected (auth failed, 1 attempts): user=<postmaster@joojoo>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured ////////////////////////////////////////////////// I use dovecot -n & saw following messages: debian:/home/mohsen# dovecot -n # 1.1.11: /usr/local/etc/dovecot.conf # OS: Linux 2.6.26-1-486 i686 Debian 5.0 log_path: /var/log/dovecot.log info_log_path: /var/log/dovecot.info protocols: pop3 ssl_disable: yes disable_plaintext_auth: no login_dir: /usr/local/var/run/dovecot/login login_executable: /usr/local/libexec/dovecot/pop3-login first_valid_uid: 89 last_valid_uid: 89 mail_uid: 89 mail_gid: 89 mail_location: maildir:~/Maildir maildir_copy_preserve_filename: yes mail_executable: /usr/local/libexec/dovecot/pop3 mail_plugin_dir: /usr/local/lib/dovecot/pop3 auth default: user: vpopmail verbose: yes debug: yes debug_passwords: yes passdb: driver: checkpassword args: /home/vpopmail/bin/vchkpw passdb: driver: vpopmail args: cache_key=%u%s * userdb: driver: vpopmail debian:/home/mohsen# ------------------------------------- Please guide me.......

1 0

[Dovecot] Maildir format use question
by Rick Romero 02 Mar '09

02 Mar '09

Hey all, I've got a couple servers using Maildir format. As I understand it from a simple perspective, 'new' contains newly delivered messages, and 'cur' contains messages that have been 'handled'. I like to keep things simple for users, so rather than have 'Spam', 'Junk' 'ToLearn' and other possibly confusing folders, what I thought I would do is scan their .Spam/cur folder for mail that was older than an hour (based on file atime(?) stamp) and feed that through SpamAssassin. The idea being that anything in 'cur' would: 1. have been moved there by the user. 2. be recently read, and I think if it were innocent, would be handled within an hour 3. Not contain newly delivered, unread mail. This is actually what I see when I view my Spam folder through Evolution. If I use a PHP webclient - either Horde or Roundcube (I've captured the debugs if you'd like them), then a simple view of the Spam folder causes the files to be moved from new/ to cur/. They are updated with the :2, - but since nothing was actually done, no flags are added. So I'm left with a quandry. I guess the simple question is, Should mail in cur, EVER not have a flag? I suppose if it were marked as UNSEEN after being SEEN, that's possible. So I just answered myself there :) Is it possible to have Dovecot NOT move a file from new/ to cur/ until a flag has been assigned to the mail? Just from a, possible, performance standpoint - it seems when accessing an INBOX from a PHP webmail system with MANY new mails, there is an unnecessary(?) mass move of these files to another folder. Thoughts? Rick

3 3

Re: [Dovecot] One Dovecot serving 2 domains - possible?
by k bah 02 Mar '09

02 Mar '09

> ----- Original Message ----- > From: "Timo Sirainen" <tss(a)iki.fi> > To: "k bah" <kbah(a)linuxmail.org> > Cc: dovecot(a)dovecot.org > Subject: Re: [Dovecot] One Dovecot serving 2 domains - possible? > Date: Fri, 27 Feb 2009 11:58:09 -0500 > > > On Feb 27, 2009, at 8:21 AM, k bah wrote: > > >> The above assert isn't from v1.1.11 and I had added some extra checks > >> there since 1.1.7. Do you have the exact assert message from v1.1.11? > > > > root@server:~/dovecot-1.1.11/src/lib# grep -n assert istream-tee.c > > 38: i_assert(tstream->istream.skip + old_used <= size); > > 85: i_assert(tee->input->v_offset <= tee- >max_read_offset); > > 119: i_assert(last_high_offset <= input->v_offset + size); > > 142: i_assert(stream->buffer == data); > > 144: i_assert(ret > 0); > > root@server:~/dovecot-1.1.11/src/lib# > > Oh. Looks like I changed the code after v1.1.11 :) > > http://hg.dovecot.org/dovecot-1.1/rev/e1cac844aa1e > > Does that fix help with your crashes? Since it's a production server and I just started working for these people, I'll try to reproduce the previous error without affecting the users e-mail (since their server is now running 1.0.15). As soon as I do that I'm going to give you a feedback for sure, if the problem persists or not. The user who reported to me the error may not have the messages that were triggering the errors, so I can't guarantee that I'll be able to reproduce the error again. Thanks for the quick response! > > > server dovecot: child 553 (auth-worker) killed with signal 11 > > This is also interesting. A crashing imap process should have no > effect on auth-worker. Can you get a gdb backtrace from that? Ok, the same as above. thanks again! > = -- Powered by Outblaze

1 0