- dovecot - dovecot.org

Re: [Dovecot] feature request: deny IP address via database
by Javier García 08 Apr '08

08 Apr '08

Written by Bill Cole on Apr 7, 2008, at 4:58 PM: >> Hey folks. One feature I'd really like to see in dovecot is the >> ability to point it at a database (with a configurable query) and >> have it allow or deny a connection based on looking up the source >> IP address in that database. ... much stuff discarded. I understand that the behaviour requested is similar to that of allow_nets (http://wiki.dovecot.org/PasswordDatabase/ExtraFields/AllowNets) but modified to explicitly deny some IPs (individually or in the range form). If so, probably some of the work should be already done. Sorry, I do not have the programming abilities enough to face this. Incidentally, I would like to notice that I opened a thread a few days ago regarding allow_nets and database (Bill's request needs to make use of an external database too) because I am not able to make allow_nets work properly when using an external DB *and IP ranges*. Maybe Bill would like to block single IPs so this bug? wold not apply to his case if an extension or adaptation of allow_nets is done. (My request, in case someone out there is curious: "Allow_nets + MySQL failing when using range notation") Regards, Javier

1 0

[Dovecot] A little assistance with Sieve
by cam＠ellisonpsychology.ca 07 Apr '08

07 Apr '08

With all the mess that my email has become, it makes sense for me to try to make use of Sieve, but I'm having quite the time finding out how to make it work. I'm running 1.0.13 on a Debian machine. Sieve appears to be compiled with it. I can access managesieve, and I have set up dovecot.conf with lda. I do not get a NO response when I PUTSCRIPI, but LISTSCRIPTS produces no result, so I assume it's not working properly, though if I try with a non-existent script I get an error message. Questions: 1. Is anyone else seeing this, or am I doing something wrong? 2. I have seen through Googling some dovecot.conf examples that suggest I should be using managesieve instead of lda (or in addition? - it's not clear), as in protocol managesieve { ... Any advice will be gratefully received. Thank you Cam -- Cam Ellison, PhD RPsych (BC #01417) Cam Ellison & Associates Ltd. 3446 Beach Avenue Roberts Creek BC V0N 2W2 Phone 604.885.4806 Fax 694.885.4809 Cell 604.989.0635

2 4

[Dovecot] A little assistance with Sieve
by cam＠ellisonpsychology.ca 07 Apr '08

07 Apr '08

With all the mess that my email has become, it makes sense for me to try to make use of Sieve, but I'm having quite the time finding out how to make it work. I'm running 1.0.13 on a Debian machine. Sieve appears to be compiled with it. I can access managesieve, and I have set up dovecot.conf with lda. I do not get a NO response when I PUTSCRIPI, but LISTSCRIPTS produces no result, so I assume it's not working properly, though if I try with a non-existent script I get an error message. Questions: 1. Is anyone else seeing this, or am I doing something wrong? 2. I have seen through Googling some dovecot.conf examples that suggest I should be using managesieve instead of lda (or in addition? - it's not clear), as in protocol managesieve { ... Any advice will be gratefully received. Thank you Cam -- Cam Ellison, PhD RPsych (BC #01417) Cam Ellison & Associates Ltd. 3446 Beach Avenue Roberts Creek BC V0N 2W2 Phone 604.885.4806 Fax 694.885.4809 Cell 604.989.0635

1 0

[Dovecot] Problem with dovecot under Vmware Server
by Marvin Raab 06 Apr '08

06 Apr '08

Hi all, Recently installed dovecot and postfix under Fedora8 and it works great. Then I installed both postfix and dovecot under VMWare Server (different machine) copying the same configuration files but changing the hostname and domain as appropriate. When testing the installation using: telnet hostname 143, I receive * OK Dovecot ready But when I telnet on port 25, I receive: Trying 127.0.0.1... Connected to 127.0.0.1. Escape character is '^]'. Instead of: Trying 127.0.0.1... Connected to 127.0.0.1. Escape character is '^]'. 220 mail.kickspam.net ESMTP Postfix Naturally, I cannot send email. Outlook responds with Server timeout. I've rebooted and restarted services. I've checked poermissions and postfix master.cf How can I troubleshoot or does anyone have a quick answer? Thanks! Here's the output of dovecot -n and postconf -n The same config files are on both hosts and only the installation under VMWare Server has the problem. [root@vmhost ~]# dovecot -n # 1.0.13: /etc/dovecot.conf login_dir: /var/run/dovecot/login login_executable(default): /usr/libexec/dovecot/imap-login login_executable(imap): /usr/libexec/dovecot/imap-login login_executable(pop3): /usr/libexec/dovecot/pop3-login mail_location: mbox:~/mail:INBOX=/var/spool/mail/%u mail_executable(default): /usr/libexec/dovecot/imap mail_executable(imap): /usr/libexec/dovecot/imap mail_executable(pop3): /usr/libexec/dovecot/pop3 mail_plugin_dir(default): /usr/lib/dovecot/imap mail_plugin_dir(imap): /usr/lib/dovecot/imap mail_plugin_dir(pop3): /usr/lib/dovecot/pop3 auth default: mechanisms: plain login passdb: driver: pam userdb: driver: passwd socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix [root@vmhost ~]# postconf -n alias_database = hash:/etc/aliases alias_maps = hash:/etc/aliases command_directory = /usr/sbin config_directory = /etc/postfix daemon_directory = /usr/libexec/postfix debug_peer_level = 2 html_directory = no inet_interfaces = all mail_owner = postfix mailq_path = /usr/bin/mailq.postfix manpage_directory = /usr/share/man message_size_limit = 50240000 mydestination = $myhostname, $mydomain, localhost mydomain = mydomain.com myorigin = $mydomain newaliases_path = /usr/bin/newaliases.postfix queue_directory = /var/spool/postfix readme_directory = /usr/share/doc/postfix-2.4.5/README_FILES relay_domains = $mydestination sample_directory = /usr/share/doc/postfix-2.4.5/samples sendmail_path = /usr/sbin/sendmail.postfix setgid_group = postdrop smtpd_recipient_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination smtpd_sasl_auth_enable = yes smtpd_sasl_path = private/auth smtpd_sasl_type = dovecot unknown_local_recipient_reject_code = 550

3 2

[Dovecot] Broken Debian package
by Thing 06 Apr '08

06 Apr '08

Hi, I have run Dovecot via Debian for some years but in the last few weeks something has broken....I have been upgrading Debian but today rebooted it to try and sort out a failed DLT....now I find dovecot is non-functional.... So, Where to look for faults please? ie logs? can I make dovecot verbose? Thunderbird if telling me Dovecot is not imap4 compliant........and I cannot connect to it... I have tried re-installing Dovecot but the Debian package contains no dovecot.conf....so I have dovecot imap-d and dovecot common installed but no config. So I copied back the config files from a safe location.... When I start up I get, hermes:/var/log# tail dovecot dovecot: 2008-04-06 11:32:32 Info: Dovecot v1.0.rc15 starting up hermes:/var/log# So trying to connect, tail -f (on /var/log/dovecot), dovecot: 2008-04-06 11:57:34 Info: imap-login: Login: user=<thing>, method=plain, rip=192.168.1.101, lip=192.168.1.254, TLS dovecot: 2008-04-06 11:57:34 Error: IMAP(thing): seq = 186, rec->uid = 0, first_new_seq = 188, records = 187 dovecot: 2008-04-06 11:57:34 Error: child 20048 (imap) killed with signal 6 dovecot: 2008-04-06 11:57:34 Info: imap-login: Login: user=<thing>, method=plain, rip=192.168.1.101, lip=192.168.1.254, TLS dovecot: 2008-04-06 11:57:34 Error: IMAP(thing): seq = 186, rec->uid = 0, first_new_seq = 188, records = 187 dovecot: 2008-04-06 11:57:34 Error: child 20050 (imap) killed with signal 6 dovecot: 2008-04-06 11:57:34 Info: imap-login: Login: user=<thing>, method=plain, rip=192.168.1.101, lip=192.168.1.254, TLS dovecot: 2008-04-06 11:57:34 Error: IMAP(thing): seq = 186, rec->uid = 0, first_new_seq = 188, records = 187 dovecot: 2008-04-06 11:57:34 Error: child 20052 (imap) killed with signal 6 dovecot: 2008-04-06 11:57:35 Info: imap-login: Login: user=<phoebe>, method=PLAIN, rip=192.168.1.102, lip=192.168.1.254, TLS dovecot: 2008-04-06 11:57:35 Info: imap-login: Login: user=<thing>, method=plain, rip=192.168.1.101, lip=192.168.1.254, TLS dovecot: 2008-04-06 11:57:35 Error: IMAP(thing): seq = 186, rec->uid = 0, first_new_seq = 188, records = 187 dovecot: 2008-04-06 11:57:35 Error: child 20062 (imap) killed with signal 6 squirrelmail is also now dead.... Ideas please? regards Steven

2 4

Re: [Dovecot] Leave mail on server leads to dup messages
by Arliss Jameson 05 Apr '08

05 Apr '08

Yep, that was it! Though I use only one user for all mail, separate home dirs are still necessary. ----- Original Message ---- From: Arliss Jameson <arlissjameson(a)yahoo.com> To: Arliss Jameson <arlissjameson(a)yahoo.com>; dovecot(a)dovecot.org Sent: Friday, April 4, 2008 5:29:04 PM Subject: Re: [Dovecot] Leave mail on server leads to dup messages Of course right when I press send, I think of something that may be the cause :) It's precisely because they are sharing the same home that this ishappening, yes? If any of the other mbox's are downloaded, dovecotincrements the X-UID count and saves it in the home? Is that right? ____________________________________________________________________________________ You rock. That's why Blockbuster's offering you one month of Blockbuster Total Access, No Cost. http://tc.deals.yahoo.com/tc/blockbuster/text5.com ____________________________________________________________________________________ You rock. That's why Blockbuster's offering you one month of Blockbuster Total Access, No Cost. http://tc.deals.yahoo.com/tc/blockbuster/text5.com

1 0

Re: [Dovecot] Leave mail on server leads to dup messages
by Arliss Jameson 05 Apr '08

05 Apr '08

Of course right when I press send, I think of something that may be the cause :) It's precisely because they are sharing the same home that this ishappening, yes? If any of the other mbox's are downloaded, dovecotincrements the X-UID count and saves it in the home? Is that right? ____________________________________________________________________________________ You rock. That's why Blockbuster's offering you one month of Blockbuster Total Access, No Cost. http://tc.deals.yahoo.com/tc/blockbuster/text5.com

1 0

[Dovecot] Leave mail on server leads to dup messages
by Arliss Jameson 05 Apr '08

05 Apr '08

Hi. I'm a dovecot newbie. I've set my pop client to leave messages on the server for 7 days. I'm downloading the same messages over and over as dovecot appears to be overwriting X-UID's in the mbox's. I can't think of any other program on the system that might write to the mbox other than postfix (and that program doesn't appear to be writing X-UID). My setup has one user (system account: vmail) that owns all mbox's. The user_query always returns vmail's home, uid and gid (you can view the SELECT's in the log snippet below).I have a total of four pop3 virtual mbox's. The example below illustrates what happens to one of them (though this problem extends to the others as well). Here's what happens: 1) Start with an empty mbox 2) Start dovecot 3) Download mail (received one email) cat mbox | egrep "X-UID:" X-UID: 789 4) Download mail again (received another email) cat mbox | egrep "X-UID:" X-UID: 789 X-UID: 790 5) Download mail once more (received three spam emails) cat mbox | egrep "X-UID:" X-UID: 811 X-UID: 812 X-UID: 813 X-UID: 814 X-UID: 815 What the?! 6) Check log dovecot: Apr 04 13:51:42 Info: auth(default): new auth connection: pid=12843 dovecot: Apr 04 13:51:42 Info: auth(default): client in: AUTH 1 PLAIN service=POP3 lip=76.158.191.23 rip=44.156.77.13 resp=<hidden> dovecot: Apr 04 13:51:42 Info: auth-worker(default): sql(imacrawler(a)searchingforaddressestospam.com,44.156.77.13): query: SELECT CONCAT(username, '@', domain) AS user, password FROM (SELECT vuser.username, vuser.password, vdomain.name AS domain FROM vuser LEFT JOIN vdomain ON vuser.vdomain_id=vdomain.id) a WHERE a.username='imacrawler' AND a.domain='searchingforaddressestospam.com' dovecot: Apr 04 13:51:42 Info: auth(default): client out: OK 1 user=imacrawler(a)searchingforaddressestospam.com dovecot: Apr 04 13:51:42 Info: auth(default): master in: REQUEST 7 12837 1 dovecot: Apr 04 13:51:42 Info: auth-worker(default): sql(imacrawler(a)searchingforaddressestospam.com,44.156.77.13): SELECT '/vmail' AS home, CONCAT('mbox:~/mail:INBOX=/var/spool/vmail/', TRIM('searchingforaddressestospam.com'), '/', TRIM('imacrawler')) AS mail, 103 AS uid, 104 AS gid dovecot: Apr 04 13:51:42 Info: auth(default): master out: USER 7 imacrawler(a)searchingforaddressestospam.com home=/vmail mail=mbox:~/mail:INBOX=/var/spool/vmail/searchingforaddressestospam.com/ima… uid=103 gid=104 dovecot: Apr 04 13:51:42 Error: POP3(imacrawler(a)searchingforaddressestospam.com): mbox sync: Expunged message reappeared in mailbox /var/spool/vmail/searchingforaddressestospam.com/imacrawler (UID 789 < 796, seq=1, idx_msgs=0) dovecot: Apr 04 13:51:42 Info: pop3-login: Login: user=<imacrawler(a)searchingforaddressestospam.com>, method=PLAIN, rip=44.156.77.13, lip=76.158.191.23 dovecot: Apr 04 13:51:42 Error: POP3(imacrawler(a)searchingforaddressestospam.com): mbox sync: UID inserted in the middle of mailbox /var/spool/vmail/searchingforaddressestospam.com/imacrawler (796 > 789, seq=1, idx_msgs=5) dovecot: Apr 04 13:51:42 Error: POP3(imacrawler(a)searchingforaddressestospam.com): mbox sync: UID inserted in the middle of mailbox /var/spool/vmail/searchingforaddressestospam.com/imacrawler (801 > 789, seq=1, idx_msgs=5) dovecot: Apr 04 13:51:43 Error: POP3(imacrawler(a)searchingforaddressestospam.com): mbox sync: UID inserted in the middle of mailbox /var/spool/vmail/searchingforaddressestospam.com/imacrawler (806 > 789, seq=1, idx_msgs=5) dovecot: Apr 04 13:51:43 Info: POP3(imacrawler(a)searchingforaddressestospam.com): Disconnected: Logged out top=0/0, retr=5/9032, del=0/5, size=8947 I have no idea why it's complaining about 796 or where that number even came from. Much thanks for any help you can give. Here's my dovecot -n: # 1.0.13: /usr/local/etc/dovecot.conf log_path: /var/log/dovecot protocols: pop3 ssl_disable: yes disable_plaintext_auth: no login_dir: /usr/local/var/run/dovecot/login login_executable: /usr/local/libexec/dovecot/pop3-login first_valid_uid: 103 last_valid_uid: 103 first_valid_gid: 104 last_valid_gid: 104 mail_privileged_group: vmail mail_executable: /usr/local/libexec/dovecot/pop3 mail_plugin_dir: /usr/local/lib/dovecot/pop3 pop3_uidl_format: %08Xu%08Xv auth default: verbose: yes debug: yes passdb: driver: sql args: /usr/local/etc/dovecot-sql.conf userdb: driver: sql args: /usr/local/etc/dovecot-sql.conf ____________________________________________________________________________________ You rock. That's why Blockbuster's offering you one month of Blockbuster Total Access, No Cost. http://tc.deals.yahoo.com/tc/blockbuster/text5.com

1 0

[Dovecot] Dovecot and stale nfs-locks hanging processes
by Søren Schrøder 05 Apr '08

05 Apr '08

Greetings dovecot mailing list. I have implemented a relatively big dovecot setup (250k users) and overall I am very pleased with dovecot functionality and performance. Setup description: * dovecot 1.0.x * FreeBSD 6.3 * Postfix (using dovecot deliver as LDA). * OpenLdap backend * Storage is NFS (Clariion EMC NFSd for Maildir, and FreeBSD NFSd for Indexes). * Locking is fcntl using RPC.lockd. * Users are accessing mail using POP3 and IMAP (IMAP mainly via Squirrelmail, but also direct) * 3 frontends for POP/SMTP and 2 frontends for IMAP (webmail). Round Robin DNS My problem: I am having issues where POP3, IMAP and DELIVER processes gets stuck, apparently waiting for device. fstat shows: bash# fstat -p 93522 USER CMD PID FD MOUNT INUM MODE SZ|DV R/W 302870 pop3 93522 root / 2 drwxr-xr-x 512 r 302870 pop3 93522 wd /home/mnt5 51592 drwxr-xr-x 80 r 302870 pop3 93522 text /usr 121619 -r-xr-xr-x 436616 r 302870 pop3 93522 0* internet stream tcp 302870 pop3 93522 1* internet stream tcp 302870 pop3 93522 2* pipe c778aa48 <-> c778a990 0 rw 302870 pop3 93522 3 /dev 24 crw-rw-rw- random r 302870 pop3 93522 5* pipe ce440b28 <-> ce440be0 0 rw 302870 pop3 93522 6* pipe ce440be0 <-> ce440b28 0 rw 302870 pop3 93522 7 /home/mnt5 9010290 -rw------- 1493 rw 302870 pop3 93522 8 - - bad - 302870 pop3 93522 9 - - bad - 302870 pop3 93522 10 - - bad And the inode in question on /home/mnt5 is a dot-nfs file, indicating stale lock: bash# ls -li | grep 9010290 9010290 -rw------- 1 302870 42 1493 Apr 3 18:05 .nfs.0668c236.6d524.4 ktrace on the pid shows absolutely no activity. The pop3 process is un-killable, and I end up stacking up pop3 processes from the user, as well as deliver to the user. Not healthy.. I was under the impression that POP3 would exit when a lock is set, preventing more than one pop3 processes pr. user, but it doesn't seem to be the case. Stopping dovecot entirely, leaves these stale pop3/imap/deliver processes hanging, even with shutdown_clients = yes The windows-problem-solution (reboot) seems to be the only way to get rid of the locked processes. So: Has anyone else observed this behavior, and eventually found the magic cure ? I wonder if there was a way to implement a "max wall-clock time" per dovecot process type (i.e.. terminate process after for example 120 sec. delivery, 600 sec pop3 etc...), as a crude "garbage-collector". Any hints/suggestions is welcome. -- Søren Schrøder

3 4

[Dovecot] LDAP auth_bind hangs and times out
by Jack McKinney 04 Apr '08

04 Apr '08

I have _almost_ got Dovecot working! One little snag... My users login using their email address as username. Each domain has their own LDAP subtree. Each user has an entry in the ou=users subtree of the domain subtree, and has a mail: field (inetOrgPerson) listing their email address/login name. I am trying to use auth_bind: when I login with jackmc(a)lorentz.com, dovecot should search for mail=jackmc(a)lorentz.com in the onelevel below ou=users,dc=lorentz,dc=com and find me as "cn=Jack McKinney,ou=users,dc=lorentz,dc=com". I have created an entry in LDAP (varmail) that should be able to do this query. Indeed, from the command line, it works: ldapsearch -h ldap.lrtz -b 'ou=users, dc=lorentz, dc=com' -D 'cn=varmail,ou=users,dc=lorentz,dc=com' -x -W -s onelevel '(&(objectClass=inetOrgPerson)(mail=jackmc(a)lorentz.com))' Enter LDAP Password: # extended LDIF # # LDAPv3 # base <ou=users, dc=lorentz, dc=com> with scope oneLevel # filter: (&(objectClass=inetOrgPerson)(mail=jackmc(a)lorentz.com)) # requesting: ALL # # Jack McKinney, users, lorentz.com dn: cn=Jack McKinney,ou=users,dc=lorentz,dc=com objectClass: top objectClass: person objectClass: organizationalPerson objectClass: inetOrgPerson cn: Jack McKinney givenName: Jack McKinney sn: McKinney mail: jackmc(a)lorentz.com # search result search: 2 result: 0 Success # numResponses: 2 # numEntries: 1 ' However, it appears that dovecot performs the above query successfully, but then never uses the password and retrieved DN to attempt to bind and authenticate the user. Instead, it just times out. My dovecot-ldap.conf is: hosts = ldap.lrtz dn = cn=varmail,ou=users,dc=lorentz,dc=com dnpass = ********* ldap_version = 3 auth_bind = yes pass_filter = (&(objectClass=inetOrgPerson)(mail=%Lu)) base = ou=users, dc=%Dd scope = onelevel The dovecot log shows: Apr 3 08:13:21 fourier dovecot: auth(default): new auth connection: pid=15774 Apr 3 08:13:30 fourier dovecot: auth(default): client in: AUTH^I1^IPLAIN^Iservice=IMAP^Isecured^Ilip=x.x.x.x^Irip=y.y.y.y^Iresp=<hidden> Apr 3 08:13:30 fourier dovecot: auth(default): ldap(jackmc(a)lorentz.com,y.y.y.y): bind search: base=ou=users, dc=lorentz,dc=com filter=(&(objectClass=inetOrgPerson)(mail=jackmc(a)lorentz.com)) Apr 3 08:16:30 fourier dovecot: imap-login: Disconnected: Inactivity: method=PLAIN, rip=y.y.y.y, lip=x.x.x.x, TLS The OpenLDAP log shows that the query is received and that it returns a match: Apr 3 08:13:30 fourier slapd[14039]: conn=7 op=3 SRCH base="ou=users,dc=lorentz,dc=com" scope=1 deref=0 filter="(&(objectClass=inetOrgPerson)(mail=jackmc(a)lorentz.com))" Apr 3 08:13:30 fourier slapd[14039]: conn=7 op=3 SRCH attr=uid Apr 3 08:13:30 fourier slapd[14039]: conn=7 op=3 SEARCH RESULT tag=101 err=0 nentries=1 text= When I do the query from the command line, there is an additional pair of lines: Apr 3 08:18:10 fourier slapd[16106]: conn=22 op=2 UNBIND Apr 3 08:18:10 fourier slapd[16106]: conn=22 fd=28 closed I thus conclude that Dovecot is not closing the connection. -- Jack McKinney GPG 1024D/99C6A174 jackmc(a)lorentz.com YM:lfaatsnat2006 AIM:jackmclorentz "There is no parameter that makes it impossible for you to perform still more excellently." -Mario Cuomo, on the lack of a clock in baseball

2 11