- dovecot - dovecot.org

[Dovecot] dovecot-1.2-managesieve "make install" ignores Dovecot's prefix
by Steffen Kaiser 30 Jan '09

30 Jan '09

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello, I'm trying to compile dovecot-1.2-managesieve from hg repo with Dovecot v1.2 and I found that managesieve uses another "install" target/prefix than I've configured in Dovecot. Is this intentional? Because you must specify the compiled Dovecot sources, is managesieve just "loosly" connected to Dovecot so it would survive a Dovecot (minor) update, or do I need to compile managesieve each time as well? If I need to compile each time, managesive should default to install into the same directory than Dovecot, shouldn't it? Bye, - -- Steffen Kaiser -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (GNU/Linux) iQEVAwUBSYMXdHWSIuGy1ktrAQJLMAf/aAwnEoyNyieWBPjy/h2V6YFrJ4KVdtwZ i+di1ft1w11P/abvZTf5dRI9dakw6aWX+ufs0gvLeWVYFwVRL4ZiIQsTUA8Z4X+3 1vuyemm70aGgX6pMX+O4oyAUoHIf1SzJFP+sGI+g40dZZbiScTugliOtdWnW7sO+ vI4rpRLUVs/xANByqKHUyj2LZrMJJbTFSfJyOHJQLc17WG9gM1RPyi+uzEIPWMg1 iqSv32ID9bWUWepIC65DG/+9TRoUP+CzMixzQBsz+pIpQk/zC11v94Lu7U6InbSg j430JFIDv/hjd+6/lonvgABLlsQtG0VLv3tAa2Mi2uk8SIW7xIsOQQ== =EUJ8 -----END PGP SIGNATURE-----

2 1

[Dovecot] managesieve/README sieve_storage doc confusion
by Steffen Kaiser 30 Jan '09

30 Jan '09

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello, http://hg.rename-it.nl/dovecot-1.2-managesieve/file/tip/README contains the paragraphs (line 47): " mail_location = If, for some inobvious reason, the sieve_storage remains unset, the managesieve daemon uses the specification of the mail_location to find out where to store the sieve files. However, this is provided only for backwards compatibility and you should always use the sieve_storage setting in stead. Additionally, the ManageSieve service uses the following settings from the plugin section of the config file. These settings are the ones used by the Sieve plugin. sieve_dir = This specifies the path to the directory where the uploaded scripts are stored. Scripts are stored as separate files with extension .sieve, all other files are ignored when scripts are listed by a ManageSieve client. If this setting remains unspecified, the mail_location setting is used as explained above. " Because sieve_storage is not mentioned anywhere else in the document and because of this discussion: http://dovecot.markmail.org/message/kzjpwdhyqhdn53zd , I suspect that sieve_dir is the older naming of it. However, the source code uses getenv("SIEVE_DIR") in lib-cmusieve, so this assumption is probably wrong. What's the correct meaning and placement of sieve_storage and sieve_dir ? Bye, - -- Steffen Kaiser -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (GNU/Linux) iQEVAwUBSYMey3WSIuGy1ktrAQIfSwf/bF7ATn3MLDHL/rMZgqj5+cbHT5t60+UJ Zq3ktiUePwbk1bP04Xtm0zrhY9g/E7pk3Q5WUAR2+laVUAYz1FIg5wp+ukS/lTpi cbM3cXC4ZqcOPVqcb2Ntxjujx0FRjJzH/KVVp8JBTkHUQ3HWV8dXuyWxkpfAgnpw O7t2uPW9fgzF7ACqQndjN/Qo/Xj6WUzICgI+SndNMscxipU20DY6CfMtOWDXJxl9 UPoLhHtB9GuylaKDNChY6bmYkO023veHuQMsOsziit0Ks25BO7J/bbiOieRaTesh +O33abIQv8mzj186YZ34Z5zRtn1xa7gFNntkbk31zi2xYkCmo2atUw== =DyFs -----END PGP SIGNATURE-----

2 1

Re: [Dovecot] Concurrent POP3 Sessions Issues
by Timo Sirainen 30 Jan '09

30 Jan '09

On Jan 29, 2009, at 1:17 PM, Mauricio López Riffo wrote: > I have problems with dovecot + ldap + nfs, we could't have more than > 20 concurrent sessions of pop3, when user 21 comes, the auth process > takes > more than 1 sec and is incresing (while most users arrives, more > delay in > autenticacion exists) and my customers complaint about the service. > We need > support about 200 concurrents pop3 users, here is my details Someone else was recently complaining about the same thing. Or was it you? Anyway, dovecot-auth doesn't know how many users are logged in so if the problem really is 21 *concurrent users* instead of n logins/ second, I find it highly unlikely that the problem is with authentication. My guess is that this has something to do with NFS. Perhaps start Dovecot with strace -tt -f dovecot and then when it's slowing down see what syscall it says is blocking.

2 1

Re: [Dovecot] cram-md5 problem
by Richard Stockton 29 Jan '09

29 Jan '09

Hi Timo, (just realized your reply was CCed to the list) At 04:28 PM 1/29/2009, you wrote: >On Jan 29, 2009, at 7:22 PM, Richard Stockton wrote: > >>I just updated to dovecot 1.1.10 from 1.1.2 and now anyone using >>cram-md5 can't get authenticated. I am using mysql for passwords >>(in plain text) and home directories. > >Set auth_debug_passwords=yes. What does it log when logging in with >CRAM-MD5? (And try with a temporary password that you can change >afterwards.) Here's an example I just pulled from the logs. dovecot: Jan 29 16:35:03 Info: auth-worker(default): sql(jennshinjo,xx.xx.xx.xx): SELECT home, uid, gid FROM users WHERE username = 'jennshinjo' AND domain = '' dovecot: Jan 29 16:35:03 Info: auth(default): prefetch(jennshinjo,xx.xx.xx.xx): success dovecot: Jan 29 16:35:03 Info: auth(default): master out: USER 1490 jennshinjo home=j/e/jennshinjo/Maildir/ uid=5000 gid=5000 home=j/e/jennshinjo/Maildir/ uid=5000 gid=5000 dovecot: Jan 29 16:35:03 Info: pop3-login: Internal login failure (auth failed, 1 attempts): user=<jennshinjo>, method=CRAM-MD5, rip=xx.xx.xx.xx, lip=10.255.0.11 >Also show your dovecot-sql.conf and dovecot -n output. :> more /usr/local/etc/dovecot-sql.conf driver = mysql connect = host=10.211.1.3 dbname=mail user=postfix password=p0stf1x9 default_pass_scheme = PLAIN password_query = SELECT password, home as userdb_home, 5000 as userdb_uid, 5000 as userdb_gid FROM mailbox where userid = '%n' :> dovecot -n # 1.1.10: /usr/local/etc/dovecot.conf # OS: Linux 2.6.18-128.el5 i686 Red Hat Enterprise Linux Server release 5.3 (Tikanga) ext3 base_dir: /var/run/dovecot/ log_path: /var/log/pop.log info_log_path: /var/log/dovecot-info.log protocols: imap imaps pop3 pop3s listen(default): *:143 listen(imap): *:143 listen(pop3): *:110 ssl_listen(default): *:993 ssl_listen(imap): *:993 ssl_listen(pop3): *:995 ssl_cert_file: /etc/ssl/certs/server.crt ssl_key_file: /etc/ssl/private/server.key ssl_cipher_list: ALL:!LOW:!SSLv2 disable_plaintext_auth: no verbose_ssl: yes login_dir: /var/run/dovecot/login login_executable(default): /usr/local/libexec/dovecot/imap-login login_executable(imap): /usr/local/libexec/dovecot/imap-login login_executable(pop3): /usr/local/libexec/dovecot/pop3-login login_greeting: Dovecot on mail-pop01.xxxxx.com ready. verbose_proctitle: yes mail_location: maildir:/mail/%h:INDEX=MEMORY mmap_disable: yes mail_executable(default): /usr/local/libexec/dovecot/imap mail_executable(imap): /usr/local/libexec/dovecot/imap mail_executable(pop3): /usr/local/libexec/dovecot/pop3 mail_plugins(default): mail_log mail_plugins(imap): mail_log mail_plugins(pop3): mail_plugin_dir(default): /usr/local/lib/dovecot/imap mail_plugin_dir(imap): /usr/local/lib/dovecot/imap mail_plugin_dir(pop3): /usr/local/lib/dovecot/pop3 mail_log_max_lines_per_sec: 0 auth default: mechanisms: plain cram-md5 debug_passwords: yes process_size: 1024 passdb: driver: sql args: /usr/local/etc/dovecot-sql.conf userdb: driver: sql args: /usr/local/etc/dovecot-sql.conf userdb: driver: prefetch I appreciate your help. Thanks. - Richard

1 0

[Dovecot] cram-md5 problem
by Richard Stockton 29 Jan '09

29 Jan '09

I just updated to dovecot 1.1.10 from 1.1.2 and now anyone using cram-md5 can't get authenticated. I am using mysql for passwords (in plain text) and home directories. Per some googling I tried to set (in /usr/local/etc/dovecot.conf): # SQL database userdb sql { # Path for SQL configuration file, see doc/dovecot-sql.conf for example args = /usr/local/etc/dovecot-sql.conf } but that didn't help. And in any case people NOT using cram-md5 can authenticate just fine, both before and after I made that change. This worked "out of the box" under 1.1.2, but is broken now. Any ideas appreciated. Thanks. - Richard

2 1

[Dovecot] Problem with dovecot config
by Thomas M Goerger 29 Jan '09

29 Jan '09

Hi, Doing a first install of dovecot, trying to copy over some of the config settings from 1.1.6. I'm getting an error, I think from the ACL plugin module. This is the error I'm getting on the console: Error: imap dump-capability process returned 89 Fatal: Invalid configuration in /etc/opt/dovecot1.8/dovecot.conf And this is what is appearing in syslog: Jan 23 12:46:57 mars.tc.umn.edu imap(dump-capability): : [ID 315030 mail.info] Loading modules from directory: /opt/dovecot1.8/lib/dovecot/imap Jan 23 12:46:57 mars.tc.umn.edu imap(dump-capability): : [ID 817342 mail.error] dlopen(/opt/dovecot1.8/lib/dovecot/imap/lib01_acl_plugin.so) failed: ld.so.1: imap: fatal: relocation error: file /opt/dovecot1.8/lib/dovecot/imap/lib01_acl_plugin.so: symbol i_strcmp_p: referenced symbol not found Other pertinent info: # /opt/dovecot1.8/sbin/dovecot --version 1.1.8 # /opt/dovecot1.8/sbin/dovecot -n # 1.1.8: /etc/opt/dovecot1.8/dovecot.conf Warning: fd limit 256 is lower than what Dovecot can use under full load (more than 8448). Either grow the limit or change login_max_processes_count and max_mail_processes settings # OS: SunOS 5.10 sun4u syslog_facility: local6 protocols: imap imaps pop3 pop3s ssl_cert_file: /etc/opt/openssl/certs/dovecot.pem ssl_key_file: /etc/opt/openssl/private/dovecot.pem shutdown_clients: no login_dir: /var/opt/dovecot1.8/run/dovecot/login login_executable(default): /opt/dovecot1.8/libexec/dovecot/imap-login login_executable(imap): /opt/dovecot1.8/libexec/dovecot/imap-login login_executable(pop3): /opt/dovecot1.8/libexec/dovecot/pop3-login login_log_format_elements: user=<%u> pid=<%p> method=%m rip=%r lip=%l %c max_mail_processes: 8192 first_valid_uid: 99 mail_location: mbox:~:INBOX=/var/mail/%u:INDEX=/var/mail/.dovecot-index/%1u/%u/ mail_debug: yes mbox_lazy_writes: no mail_executable(default): /opt/dovecot/libexec/dovecot/imap-helper mail_executable(imap): /opt/dovecot/libexec/dovecot/imap-helper mail_executable(pop3): /opt/dovecot1.8/libexec/dovecot/pop3 mail_plugins(default): acl mail_plugins(imap): acl mail_plugins(pop3): mail_plugin_dir(default): /opt/dovecot1.8/lib/dovecot/imap mail_plugin_dir(imap): /opt/dovecot1.8/lib/dovecot/imap mail_plugin_dir(pop3): /opt/dovecot1.8/lib/dovecot/pop3 mail_log_prefix: [%p] %Us(%u): imap_client_workarounds(default): delay-newmail outlook-idle tb-extra-mailbox-sep imap_client_workarounds(imap): delay-newmail outlook-idle tb-extra-mailbox-sep imap_client_workarounds(pop3): namespace: type: private separator: / location: mbox:~:INBOX=/var/mail/%u:INDEX=/var/mail/.dovecot-index/%1u/%u/ inbox: yes list: yes subscriptions: yes namespace: type: private separator: / prefix: mail/ location: mbox:~/mail/:INDEX=/var/mail/.dovecot-index/%1u/%u/ hidden: yes list: yes subscriptions: yes namespace: type: private separator: / prefix: ~/mail/ location: mbox:~/mail/:INDEX=/var/mail/.dovecot-index/%1u/%u/ hidden: yes list: yes subscriptions: yes namespace: type: private separator: / prefix: ~%u/mail/ location: mbox:~/mail/:INDEX=/var/mail/.dovecot-index/%1u/%u/ hidden: yes list: yes subscriptions: yes namespace: type: private separator: / prefix: Shared/ location: maildir:~/Maildir/Shared:INDEX=/var/mail/.dovecot-index/%1u/%u/shared:CONTROL=/var/mail/.dovecot-index/%1u/%u/shared-control hidden: yes list: yes subscriptions: yes namespace: type: private separator: / prefix: mail/Shared/ location: maildir:~/Maildir/Shared:INDEX=/var/mail/.dovecot-index/%1u/%u/shared:CONTROL=/var/mail/.dovecot-index/%1u/%u/shared-control hidden: yes list: yes subscriptions: yes namespace: type: private separator: / prefix: ~/mail/Shared/ location: maildir:~/Maildir/Shared:INDEX=/var/mail/.dovecot-index/%1u/%u/shared:CONTROL=/var/mail/.dovecot-index/%1u/%u/shared-control hidden: yes list: yes subscriptions: yes namespace: type: private separator: / prefix: AutoFiled/ location: mbox:/archive/home/%1u/%u/mail/AutoFiled:INDEX=/var/mail/.dovecot-index/%1u/%u/ hidden: yes list: yes subscriptions: yes namespace: type: private separator: / prefix: mail/AutoFiled/ location: mbox:/archive/home/%1u/%u/mail/AutoFiled:INDEX=/var/mail/.dovecot-index/%1u/%u/ hidden: yes list: yes subscriptions: yes namespace: type: private separator: / prefix: ~/mail/AutoFiled/ location: mbox:/archive/home/%1u/%u/mail/AutoFiled:INDEX=/var/mail/.dovecot-index/%1u/%u/ hidden: yes list: yes subscriptions: yes namespace: type: private separator: / prefix: Prefs/ location: mbox:~:INDEX=MEMORY hidden: yes list: yes subscriptions: yes auth default: username_format: %Lu passdb: driver: pam args: session=yes * userdb: driver: passwd plugin: acl: vfile: Any help would be great. Thanks! ************************************************************************* * Tom Goerger - Email/Unix System Administrator * * * * University of Minnesota Email: tmg(a)umn.edu * * Operations, Infrastructure and Architecture Phone: 4-5804 * * Internet Services Office: 626J WBOB * * * *************************************************************************

2 3

[Dovecot] Killing Dovect, an unpleasant surprise
by Stewart Dean 29 Jan '09

29 Jan '09

When it came time to upgrade DC or replace the certificate, I would find the root instance of dovecot and do a kill -7 of it. Within 20-30 seconds, all the hundreds of DC related processes would go away, I would swap the executable or certificate/key and restart DC. Very clean and quick. Surprise. After switching from 1.0.15 to 1.1.8 and doing the kill, I found that all the imap-login instances had been inherited by the root (1) process and did not go away. Yikes! An Unpleasant Surprise. So instead of being down for a minute, I was out for a much more noticeable 5-7 minutes, while I QUICK did an awk of the ps list to give me the pids and then xarg killed them. My boss asked me if this was a pink slip notice. :( Is this The Way Things Will Be? Is there a new way to kill everything DC related quickly and cleanly? -- ==== Stewart Dean, Unix System Admin, Henderson Computer Resources Center of Bard College, Annandale-on-Hudson, New York 12504 sdean(a)bard.edu voice: 845-758-7475, fax: 845-758-7035 "Resolve then, that on this very ground, with small flags waving and tinny blasts on tiny trumpets, we shall meet the enemy, and not only may he be ours, he may be us." === From the introduction to the original Pogo Papers

2 1

[Dovecot] Trash for lda
by Alaa Ibrahim 29 Jan '09

29 Jan '09

Hi, I was wondering if there is a solution to the case when the user can't recieve emails because of being over quota, something like http://wiki.dovecot.org/Plugins/Trash, but for the lda, not the imap? Thanks, ------------------------- You can never find the chance to be the first to know about the newest movies showing in Arab theatres until you visit Maktoob Movies! http://www.maktoob.com/movies

3 2

[Dovecot] discrete passdb lookups for dovecot-auth
by benjamin thielsen 29 Jan '09

29 Jan '09

hi- i'm using ldap for user authentication, and would like to use different ldap lookups for authentication happening via postfix (smtp auth) vs. authentication happening through dovecot (imap logins). how can this be done, without running multiple instances? thanks! -bt

2 3

[Dovecot] Concurrent POP3 Sessions Issues
by Mauricio López Riffo 29 Jan '09

29 Jan '09

Hi, I have problems with dovecot + ldap + nfs, we could't have more than 20 concurrent sessions of pop3, when user 21 comes, the auth process takes more than 1 sec and is incresing (while most users arrives, more delay in autenticacion exists) and my customers complaint about the service. We need support about 200 concurrents pop3 users, here is my details Front Internet 1 Load Balancer configured with 2 servers reals App Servers 2 Servers Xeon 3.0Ghz, 4G Ram, rhel4 update 7 Dovecot 1.1.8 (i386 rpm complied by source rpm from fedora core 10) Ldap Server 2 Server Xeon QuadCore 2.5Ghz, 8G Ram, rhel5 update 2 Openldap 2.0.X (x86_64 rpms compiled by source rpm from rhel3) Nfs Server 1 Server Xeon 3.0Ghz, 4G Ram, rhel3 update 4 My conf: # 1.1.8: dovecot.conf # OS: Linux 2.6.9-78.0.13.ELsmp i686 Red Hat Enterprise Linux ES release 4 (Nahant Update 7) protocols: imap pop3 listen(default): app-server:143 listen(imap): app-server:143 listen(pop3): app-server:110 ssl_disable: yes login_dir: /var/run/dovecot/login-mail login_executable(default): /usr/libexec/dovecot/imap-login login_executable(imap): /usr/libexec/dovecot/imap-login login_executable(pop3): /usr/libexec/dovecot/pop3-login login_greeting: Welcome POP3/IMAP Server New on app1. login_process_per_connection: no login_process_size: 256 login_processes_count: 50 mail_max_userip_connections(default): 50 mail_max_userip_connections(imap): 50 mail_max_userip_connections(pop3): 10 verbose_proctitle: yes first_valid_uid: 8 mail_uid: 8 mail_gid: 12 mail_location: maildir:%h/Maildir:INDEX=/var/cache/dovecot/indexes/%2d/%1u/%2u/%u mail_debug: yes mail_full_filesystem_access: yes mmap_disable: yes mail_nfs_storage: yes mail_executable(default): /usr/libexec/dovecot/imap mail_executable(imap): /usr/libexec/dovecot/imap mail_executable(pop3): /usr/libexec/dovecot/pop3 mail_plugins(default): quota imap_quota mail_plugins(imap): quota imap_quota mail_plugins(pop3): quota mail_log mail_plugin_dir(default): /usr/lib/dovecot/imap mail_plugin_dir(imap): /usr/lib/dovecot/imap mail_plugin_dir(pop3): /usr/lib/dovecot/pop3 pop3_uidl_format(default): %08Xu%08Xv pop3_uidl_format(imap): %08Xu%08Xv pop3_uidl_format(pop3): UID%u-%v pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls auth default: realms: domain.cl default_realm: domain.cl verbose: yes debug: yes debug_passwords: yes count: 32 worker_max_count: 16 passdb: driver: ldap args: /etc/dovecot/dovecot-ldap-new.conf userdb: driver: ldap args: /etc/dovecot/dovecot-ldap-new.conf plugin: quota: maildir mail_log_events: delete undelete expunge copy mailbox_delete mail_log_fields: uid box msgid size # dovecot-ldap-new.conf hosts = 10.1.2.3 10.1.2.4 dn = cn=Usr,o=USERS,c=CL dnpass = pass sasl_bind = no tls = no auth_bind = yes ldap_version = 3 base = dc=%d,o=MAIL,o=USERS,c=CL scope = subtree user_attrs = mailMessageStore=mail:INDEX=/var/cache/dovecot/indexes/%2d/%1u/%2u/%u,homeDi rectory=home,,,uidNumber=uid,gidNumber=gid,mailQuota=quota:storage user_filter = (&(objectClass=posixAccount)(uid=%n)) pass_attrs = mail=user,userPassword=password pass_filter = (&(objectClass=posixAccount)(uid=%n)) default_pass_scheme = CRYPT Regards ---- Mauricio López Riffo Red Hat Certified Engineer 804006455319519 Netline Telecomunicaciones Chile Los Conquistadores 2430, Providencia, Santiago. Codigo Postal: 7530041 Fono: +562 6560600 Móvil: +569 90992366

1 0