- dovecot - dovecot.org

[Dovecot] Dovecot should raise the limit of file descriptors at startup...
by Peter Eriksson 27 Aug '07

27 Aug '07

We've run into a situation where the Dovecot master process "dovecot" runs out of file descriptors on Solaris 10 since the default is only 256: # plimit 1 1: /sbin/init resource current maximum time(seconds) unlimited unlimited file(blocks) unlimited unlimited data(kbytes) unlimited unlimited stack(kbytes) 8192 unlimited coredump(blocks) unlimited unlimited nofiles(descriptors) 256 65536 vmemory(kbytes) unlimited unlimited Output from "pfiles" after we raised the limit manually: # pfiles 26378 | head -10 26378: /ifm/sbin/dovecot -c /etc/dovecot.conf Current rlimit: 16384 file descriptors 0: S_IFCHR mode:0666 dev:327,15 ino:18128 uid:0 gid:3 rdev:13,2 O_RDONLY|O_LARGEFILE /export/zones/dovecot/root/dev/null 1: S_IFCHR mode:0666 dev:327,15 ino:18128 uid:0 gid:3 rdev:13,2 O_RDONLY|O_LARGEFILE /export/zones/dovecot/root/dev/null 2: S_IFCHR mode:0666 dev:327,15 ino:18128 uid:0 gid:3 rdev:13,2 O_RDONLY|O_LARGEFILE # pfiles 26378 | tail -10 243: S_IFIFO mode:0000 dev:324,0 ino:2038192 uid:0 gid:0 size:0 O_RDWR|O_NONBLOCK FD_CLOEXEC 246: S_IFIFO mode:0000 dev:324,0 ino:2048002 uid:0 gid:0 size:0 O_RDWR|O_NONBLOCK FD_CLOEXEC 247: S_IFIFO mode:0000 dev:324,0 ino:2048441 uid:0 gid:0 size:0 O_RDWR|O_NONBLOCK FD_CLOEXEC 258: S_IFIFO mode:0000 dev:324,0 ino:2042076 uid:0 gid:0 size:0 O_RDWR|O_NONBLOCK FD_CLOEXEC 459: S_IFIFO mode:0000 dev:324,0 ino:1311426 uid:0 gid:0 size:0 O_RDWR|O_NONBLOCK FD_CLOEXEC Perhaps the Dovecot master process should raise it's own limit to the allowed maximum when it starts? (getrlimit()+setrlimit()), or be user configurable? Has this been discussed somewhere before? - Peter

4 4

[Dovecot] Fedora devel dovecot problem
by Nicolas Mailhot 27 Aug '07

27 Aug '07

Hi, You may be interested in this report: https://bugzilla.redhat.com/show_bug.cgi?id=254217 Regards, -- Nicolas Mailhot

1 0

[Dovecot] Sieve Vacation cause deliver to die
by M1 27 Aug '07

27 Aug '07

I have compile with the vacation patch (dovecot-sieve-1.0-logging.patch) and log file shown. ----------------------------------------- 2007-08-15 11:28:34 deliver(steve(a)tinchun.com): sieve_execute_bytecode(/home/mail/sieve/steve(a)tinchun.com/.dovecot.sievec) failed 2007-08-15 11:28:34 deliver(steve(a)tinchun.com): sieve runtime error: Run error ----------------------------------------- my .dovecot.sieve # Sieve Filter # 由 Ingo (http://www.horde.org/ingo/) 產生 (August 15, 2007, 10:49 am) require "vacation"; # 假期通知 if allof ( not exists ["list-help", "list-unsubscribe", "list-subscribe", "list-owner", "list-post", "list-archive", "list-id"], not header :comparator "i;ascii-casemap" :is "Precedence" "list,bulk" ) { vacation :days 7 :addresses "steve(a)tinchun.com" :subject "test" "test vacation"; }

3 5

[Dovecot] Kmail client desconnection
by Jordi Espasa Clofent 27 Aug '07

27 Aug '07

Hi all, I have a Postfix+Dovecot working in beta/testing; it seems to run very fine, but one beta-tester user says that kmail informs him about frequent desconnections. My dovecot -a shows: # /etc/dovecot.conf base_dir: /var/run/dovecot log_path: info_log_path: log_timestamp: %b %d %H:%M:%S syslog_facility: mail protocols: imaps listen: [::] ssl_listen: ssl_disable: no ssl_ca_file: ssl_cert_file: /etc/pki/dovecot/certs/dovecot.pem ssl_key_file: /etc/pki/dovecot/private/dovecot.pem ssl_key_password: ssl_parameters_regenerate: 168 ssl_cipher_list: ssl_verify_client_cert: no disable_plaintext_auth: no verbose_ssl: no shutdown_clients: yes nfs_check: yes version_ignore: no login_dir: /var/run/dovecot/login login_executable: /usr/libexec/dovecot/imap-login login_user: dovecot login_greeting: Dovecot ready. login_log_format_elements: user=<%u> method=%m rip=%r lip=%l %c login_log_format: %$: %s login_process_per_connection: yes login_chroot: yes login_greeting_capability: no login_process_size: 32 login_processes_count: 3 login_max_processes_count: 128 login_max_connections: 256 valid_chroot_dirs: mail_chroot: max_mail_processes: 1024 verbose_proctitle: no first_valid_uid: 4444 last_valid_uid: 4444 first_valid_gid: 1 last_valid_gid: 0 mail_extra_groups: default_mail_env: mail_location: maildir:/var/vmail/%u mail_cache_fields: flags mail_never_cache_fields: imap.envelope mail_cache_min_mail_count: 0 mailbox_idle_check_interval: 30 mail_debug: no mail_full_filesystem_access: no mail_max_keyword_length: 50 mail_save_crlf: no mail_read_mmaped: no mmap_disable: no mmap_no_write: no lock_method: fcntl maildir_stat_dirs: no maildir_copy_with_hardlinks: yes mbox_read_locks: fcntl mbox_write_locks: fcntl mbox_lock_timeout: 300 mbox_dotlock_change_timeout: 120 mbox_min_index_size: 0 mbox_dirty_syncs: yes mbox_very_dirty_syncs: no mbox_lazy_writes: yes dbox_rotate_size: 2048 dbox_rotate_min_size: 16 dbox_rotate_days: 1 umask: 63 mail_drop_priv_before_exec: no mail_executable: /usr/libexec/dovecot/imap mail_process_size: 256 mail_plugins: mail_plugin_dir: /usr/lib64/dovecot/imap mail_log_prefix: %Us(%u): imap_max_line_length: 65536 imap_capability: imap_client_workarounds: outlook-idle pop3_no_flag_updates: no pop3_enable_last: no pop3_reuse_xuidl: no pop3_lock_session: no pop3_uidl_format: %08Xu%08Xv pop3_client_workarounds: pop3_logout_format: top=%t/%p, retr=%r/%b, del=%d/%m, size=%s auth default: mechanisms: plain realms: default_realm: cache_size: 0 cache_ttl: 3600 executable: /usr/libexec/dovecot/dovecot-auth user: nobody chroot: username_chars: abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890.-_@ username_translation: username_format: master_user_separator: anonymous_username: anonymous krb5_keytab: verbose: no debug: no debug_passwords: no ssl_require_client_cert: no ssl_username_from_cert: no count: 1 worker_max_count: 30 process_size: 256 passdb: driver: sql args: /etc/dovecot_mysql.conf deny: no pass: no master: no userdb: driver: sql args: /etc/dovecot_mysql.conf userdb: driver: prefetch args: socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix master: path: /var/run/dovecot/auth-master mode: 432 user: vmail group: vmail ¿How can I debbug this behaviour or how can I determine if this issue is a client or dovecot fail? TIA.

3 6

Re: [Dovecot] Log format question...
by Mike Cisar 27 Aug '07

27 Aug '07

> > What about if %u were permanently changed... but %n and %d left with > > the original values. It would seem that those people relying on the > > behavior of %u being stripped would not likely be using nor caring > > about the values of %n and %d since they are essentially discarding > > them anyway? That way you have %u acting as the "authentication > > username", and %n and %d containing the "username" and "domain" (as > sent by the client). > > Maybe, but it's still an incompatible change that could break existing > installations. Also you're thinking only about the case when you want > to drop the domain. auth_username_format can be used for a lot of other > things as well. It gets confusing if %n and %d sometimes change, but > sometimes don't. True, I hadn't thought about that. I'm not much of a C programmer especially in the scheme of something as complex as Dovecot... but if you could be so kind as to point me within a couple of metres of the location in the code where the changes to %n and %d get made by auth_username_format, I'll try to patch something myself locally on my servers to get the result I need for now and leave it up to you to decide if it's worthwhile adding additional variables at some point down the road to expose the original values. Cheers, >>>>> Mike <<<<<

1 0

[Dovecot] authentication with mysql - problem with table name escaping
by XhE 26 Aug '07

26 Aug '07

Found a problem with dovecot 1.0.3 and mysql authentication I got a problem with escaping of mysql table names. Usually, when a mysql table name has some special character (in my case there is a table beginning with the # character) one has to put into these special quotes --- ` ---; others like ' oder " are not recognized. But dovecot somehow doesn't allow me to do that. After switchting auth_verbose to true I get entries in /var/log/messages stating: Password query failed: Incorrect table name ' ' Regards, XhE

4 5

[Dovecot] Authentication using only TLS client certificates
by Martin Lambers 26 Aug '07

26 Aug '07

Hi! I'd like to configure dovecot to use only TLS client certificates for authentication. After the user presented a client certificate and that certificate was verified, no password-based authentication should be necessary anymore. Is this currently possible? Or would this require support for the SASL EXTERNAL mechanism? Regards, Martin

2 1

[Dovecot] Log format question...
by Mike Cisar 26 Aug '07

26 Aug '07

Trying to do a little (cosmetic) tweak to my configuration and just don't seem to be able to come up with a set of options that works. My POP/IMAP configuration is working just fine in terms of mail retrieval, etc. What I'm seeing in the logs now is... Aug 13 18:15:17 test2 dovecot: pop3-login: Login: user=<support>, method=PLAIN, rip=10.11.12.12, lip=10.11.12.13 I would prefer (for ease of troubleshooting) to have "user=<support(a)realm.com>" appear in the logs instead, to save having to figure the realm from the IP value. Have played around with various combinations of %u, %n and %d and all I seem to be able to accomplish is break the working part of the config. I'm sure the answer is probably something simple, or some combination I haven't tried... but it's certainly escaping me at the moment. The relevant (I think) part of my config follows. The usernames in the mentioned passwd and shadow files are in the 'user' format (ie. not 'user@realm'). --snip-- mail_location = mbox:/vhome/%l/home/%n/mail:INBOX=/var/spool/vmail/%l/%n auth_username_format = %n passdb passwd-file { args = /etc/vmail/shadow.%l } userdb passwd-file { args = /etc/vmail/passwd.%l } login_log_format_elements = user=<%u> method=%m rip=%r lip=%l %c --snip-- Hints and suggestions appreciated! Cheers, >>>>> Mike <<<<<

2 3

[Dovecot] removing IMAP keywords?
by martin f krafft 25 Aug '07

25 Aug '07

Hi there, I found that with an IMAP command like <unique-leader> STORE 1 +FLAGS (testflag) I can set arbitrary flags on mails through the dovecot IMAP daemon. This rules. Now I wonder, however, how I can remove those flags, which become properties of the folder, really. For instance, after the above, SELECT on the containing folder gives: * FLAGS (\Answered \Flagged \Deleted \Seen \Draft testflag) * OK [PERMANENTFLAGS (\Answered \Flagged \Deleted \Seen \Draft testflag \*)] Flags permitted. Even if I remove the flag from all messages or even delete all messages in the folder, the flag stays on the folder. Is there an IMAP way of removing flags from a folder? Also, does someone know where I can find specification on what characters are allowed for keywords? RFC 3501 is strangely quiet on this, or I am blind. Thanks, -- martin; (greetings from the heart of the sun.) \____ echo mailto: !#^."<*>"|tr "<*> mailto:" net@madduck "gilmour's guitar sounds good whether you've got a bottle of cider in your hand or a keyboard and a mouse." -- prof. bruce maxwell spamtraps: madduck.bogus(a)madduck.net

4 6

[Dovecot] Dovecot IMAP/POP3 Proxy with LDAP
by Raphael Bittencourt S. Costa 24 Aug '07

24 Aug '07

Hello all, I'm having problems to make Dovecot proxy work, I configured it following dovecot's site. See my test below: It accepts login and password and then closes the connection. bastion01:~/build# telnet localhost 110 Trying 127.0.0.1... Connected to localhost. Escape character is '^]'. +OK Dovecot ready. user raphael.costa(a)xxxx.com.br +OK pass xxxxxx +OK Logged in. Connection closed by foreign host. See that it get the host information but still try to access the mbox locally. Aug 16 16:22:36 bastion01 dovecot: auth(default): ldap(raphael.costa(a)xxxx.com.br,127.0.0.1): bind: dn=cn=raphael.costa,ou=xxxx.com.br,ou=accounts,o=comMail Aug 16 16:22:36 bastion01 dovecot: auth(default): client out: OK 2 user=raphael.costa(a)xxxx.com.br host=mailserver-01.xxxx.com.br Aug 16 16:22:36 bastion01 dovecot: auth(default): master in: REQUEST 1 3894 2 Aug 16 16:22:36 bastion01 dovecot: POP3(raphael.costa(a)xxxx.com.br): maildir: access(/dev/null/Maildir, rwx): failed: Not a directory Aug 16 16:22:36 bastion01 dovecot: POP3(raphael.costa(a)xxxx.com.br): maildir: couldn't find root dir Aug 16 16:22:36 bastion01 dovecot: POP3(raphael.costa(a)xxxx.com.br): mbox: root: access(/dev/null/mail, rwx) failed: Not a directory Aug 16 16:22:36 bastion01 dovecot: POP3(raphael.costa(a)xxxx.com.br): mbox: root: access(/dev/null/Mail, rwx) failed: Not a directory Aug 16 16:22:36 bastion01 dovecot: POP3(raphael.costa(a)xxxx.com.br): mbox: checking if we are chrooted: Aug 16 16:22:36 bastion01 dovecot: POP3(raphael.costa(a)xxxx.com.br): mbox autodetect: data= Aug 16 16:22:36 bastion01 dovecot: POP3(raphael.costa(a)xxxx.com.br): mbox autodetect: has .imap/: stat(/.imap) failed: No such file or directory Aug 16 16:22:36 bastion01 dovecot: POP3(raphael.costa(a)xxxx.com.br): mbox autodetect: has inbox: stat(/inbox) failed: No such file or directory Aug 16 16:22:36 bastion01 dovecot: POP3(raphael.costa(a)xxxx.com.br): mbox autodetect: has mbox: stat(/mbox) failed: No such file or directory Aug 16 16:22:36 bastion01 dovecot: POP3(raphael.costa(a)xxxx.com.br): mbox: root mail directory not found My dovecot-ldap.conf: pass_attrs = uid=user,userPassword=password,mailMessageStore=userdb_home,qmailUID=userdb_uid,qmailGID=userdb_gid,proxy,mailHost=host What am I doing wrong? Raphael Costa

3 4