- dovecot - dovecot.org

[Dovecot] PAM timed out, kill failed, auth SEGV
by Thomas Arnett 04 Jul '07

04 Jul '07

My log is full of blocks like this: auth(default): pam(?): PAM child process 13576 timed out, killing it auth(default): PAM: kill(13576) failed: No such process Often, this is recorded for several pids at once. Occasionally, there's a single burst when a virtual user logs in, immediately before pam_authenticate() fails and checkpassword is executed. When this happens, pam() contains the username and remote IP. Usually, it starts 2 minutes after a login attempt (successful or not) and repeats every 10 seconds indefinitely. pam() contains something else: ~87% ? ~ 9% [garbage],master ~ 4% ?,master < 1% [empty] [garbage] varies; it seems to be constant for an instance of auth, but I haven't verified this. Eventually, auth segfaults: Core was generated by `dovecot-auth'. Program terminated with signal 11, Segmentation fault. ... #0 0x08087a68 in str_sanitize_append (dest=0x80a8950, src=0x3d9 <Address 0x3d9 out of bounds>, max_len=64) at str-sanitize.c:11 p = 0x3d9 <Address 0x3d9 out of bounds> #1 0x08057a1d in get_log_str (auth_request=0x80c6a00, subsystem=0x808f7cd "pam", format=0x808f9ac "PAM child process %s timed out, killing it", va=0x597f8c5c ":\211\n\b?|\t\b?|\t\b?\214\177Y") at auth-request.c:1121 ip = 0xa <Address 0xa out of bounds> str = (string_t *) 0x80a8950 #2 0x08057c62 in auth_request_log_error (auth_request=0x80c6a00, subsystem=0x808f7cd "pam", format=0x808f9ac "PAM child process %s timed out, killing it") at auth-request.c:1177 va = 0x597f8c5c ":\211\n\b?|\t\b?|\t\b?\214\177Y" #3 0x080658ee in pam_child_timeout (context=0x0) at passdb-pam.c:537 request = (struct pam_auth_request *) 0x80c6de8 iter = (struct hash_iterate_context *) 0x80bcdb0 key = (void *) 0xa9e value = (void *) 0x80c6de8 timeout = 1182548633 #4 0x08079fc5 in io_loop_handle_timeouts (ioloop=0x80b09b0, update_run_now=true) at ioloop.c:294 t = (struct timeout *) 0x80b4ca8 called_timeouts = (struct timeout *) 0x80b4ca8 tv = {tv_sec = 0, tv_usec = 0} t_id = 2 #5 0x0807b32e in io_loop_handler_run (ioloop=0x80b09b0) at ioloop- epoll.c:175 ctx = (struct ioloop_handler_context *) 0x80b09d8 events = (struct epoll_event *) 0x80b0a18 event = (const struct epoll_event *) 0x80b0a18 list = (struct io_list *) 0x80c42d8 io = (struct io *) 0x0 tv = {tv_sec = 1, tv_usec = 180418} events_count = 12 t_id = 2 msecs = 1181 ret = 0 i = 1 j = 3 call = true #6 0x0807a0a8 in io_loop_run (ioloop=0x80b09b0) at ioloop.c:329 No locals. #7 0x0805d7ee in main (argc=1, argv=0x597f8ec4) at main.c:321 foreground = false My config (Gentoo Linux hardened/x86/2.6): # 1.0.1: /etc/dovecot/dovecot.conf listen: [::1] ssl_listen: [::] ssl_cert_file: /etc/ssl/misfeature.net/crt ssl_key_file: /etc/ssl/misfeature.net/key ssl_cipher_list: HIGH login_dir: /var/run/dovecot/login login_executable: /usr/libexec/dovecot/imap-login login_greeting_capability: yes verbose_proctitle: yes first_valid_uid: 1000 first_valid_gid: 100 mail_location: maildir:~/mail mail_debug: yes maildir_copy_with_hardlinks: yes mail_drop_priv_before_exec: yes imap_client_workarounds: delay-newmail outlook-idle auth default: verbose: yes debug: yes passdb: driver: pam args: * passdb: driver: checkpassword args: /usr/local/bin/checkpassword userdb: driver: passwd userdb: driver: prefetch socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix I turned on the various logging options while investigating this problem; the messages appear even without. -- TA

2 1

[Dovecot] Maildir configuration vs ZFS and snapshots...
by Peter Eriksson 04 Jul '07

04 Jul '07

I have a little tricky issue around here. First some background: Every user is assigned their own ZFS filesystem, and it's mounted as /home/USER with a Maildir inside it. The there is a filesystem snapshot (read-only) taken automatically every day by the system. The idea is to allow users easy access to backup copies of their mail so that they can restore things themself.. For example this structure (somewhat abbreviated, some files/dirs removed): /home/testson/ .zfs/ snapshot/ 2007-06-18/ Maildir/ cur/ new/ tmp/ .Trash/ cur/ new/ tmp/ Maildir/ cur/ new/ tmp/ .Trash/ cur/ new/ tmp/ Now,I can access the normal Maildir INBOX and folders nicely via Dovecot/IMAP. The thing is I'd like to be able to access the snapshot too via Dovecot/IMAP somehow. My first idea was to use Dovecots namespace feature like this in the config file: namespace private { separator = / prefix = snapshot/ location = maildir:~/.zfs/snapshot/2007-06-18/Maildir:CONTROL=~/.dovecot/control:INDEX=~/.dovecot/index } This works great for the mail folders inside the Maildir - but not for the INBOX which isn't displayed at all... (Ie, under the "snapshot" prefix I only see "Trash" etc when looking at the folder from an IMAP client). I think that I'd need to use the "INBOX=" option for Dovecot to see the top-level "new/cur/tmp" directories in the snapshot folder, but you can only have one INBOX if I'm not mistaken? Any suggestions on how best to configure this? - Peter

3 6

[Dovecot] multiple userdb/passdb
by Thomas Balsfulland 04 Jul '07

04 Jul '07

hi all, i am using debian etch with dovecot imap (version 1.0.rc15-2) and mysql-database for the virtual mailuser. all informations (username, password, mailbox format, mailbox location, quota) are find in the sql. the maildir are locates at /home/vmail/, every is working fine. now i want to use imap for the system user as well - at the moment they cant user imap because they are not find in the sql db. so i set a second userdb/passwd in the dovecot.conf for the local system-user. now the config says: auth default { passdb passwd-file { args = /etc/dovecot/localuser } passdb sql { args = /etc/dovecot/dovecot-sql.conf } userdb passwd-file { args = /etc/dovecot/localuser } userdb sql { args = /etc/dovecot/dovecot-sql.conf } } and /etc/dovecot/localuser looks: localuser1:password:1000:1000::/home/localuser1::userdb_mail=mbox:~/Mail:INBOX=~/Mail/incoming now the local user is able to authenticate, but cant acces his mailboxes the logfile says: host dovecot: imap-login: Login: user=<localuser1>,method=PLAIN, rip=195.xxx.xxx.xxx, lip=193.yyy.yyy.yyy, TLS host dovecot: IMAP(tbals): lstat(/home/vmail//localuser1/cur) failed: Permission denied host dovecot: IMAP(tbals): lstat(/home/vmail/shared) failed: Permission denied it seems dovevot ignore the settings in /etc/dovecot/localuser. could someone help? regards thomas -- thomas balsfulland tbals(a)ctrl-c.de zwischen mut und dummheit liegt nur ein grat der sich durch das vorbereitetsein unterscheidet

1 0

[Dovecot] OT - Claws Mail on Mac OS X
by Gerard 04 Jul '07

04 Jul '07

Someone on this list recently asked regarding the availability of Claws Mail on Mac OS X architecture, A BETA release has just been issued. http://damien.krotkine.com/claws/ -- Gerard

1 0

[Dovecot] convert plugin: endless conversion and duplicate messages
by Andrew Ziem 03 Jul '07

03 Jul '07

Hi, When an mbox has a filename with a period, the Dovecot 1.0.1 convert plugin will endlessly convert the same mbox causing duplicate messages. To reproduce, create try converting two mboxes: one with a valid name and another with an invalid name. Then, repeat the login procedure a few times. Dovecot should do something more graceful such as replacing periods with another character. Here's /var/log/mail/errors Jul 2 08:29:44 aslan dovecot: IMAP(crystalp): Mailbox conversion: Couldn't create mailbox Print Shop Misc.: Invalid mailbox name Jul 2 08:39:46 aslan dovecot: IMAP(crystalp): Mailbox conversion: Couldn't create mailbox Print Shop Misc.: Invalid mailbox name Jul 2 08:48:54 aslan dovecot: IMAP(crystalp): Mailbox conversion: Couldn't create mailbox Print Shop Misc.: Invalid mailbox name Jul 2 08:48:58 aslan dovecot: IMAP(crystalp): Mailbox conversion: Couldn't create mailbox Print Shop Misc.: Invalid mailbox name Jul 2 08:49:39 aslan dovecot: IMAP(crystalp): Mailbox conversion: Couldn't create mailbox Print Shop Misc.: Invalid mailbox name Jul 2 08:59:40 aslan dovecot: IMAP(crystalp): Mailbox conversion: Couldn't create mailbox Print Shop Misc.: Invalid mailbox name Jul 2 09:09:40 aslan dovecot: IMAP(crystalp): Mailbox conversion: Couldn't create mailbox Print Shop Misc.: Invalid mailbox name Jul 2 09:20:23 aslan dovecot: IMAP(crystalp): Mailbox conversion: Couldn't create mailbox Print Shop Misc.: Invalid mailbox name I didn't test other non-{alphanumeric,whitespace} characters. Other than this and my previous e-mails, our conversion from UW-IMAP mboxes went nicely. I notice the performance difference, and our users will be happy to finally have proper subfolders. Andrew

1 0

[Dovecot] listen parm questions
by Stewart Dean 03 Jul '07

03 Jul '07

Q1: My imap server has 4 interfaces, but only one is used for imap traffic. Can I do this: listen = 10.20.30.40:10143 (when imap.mycollege.edu is 10.20.30.40) Or is there even any benefit to doing this? Q2: Can I specify more than one port....during test eval, I've had the IT dept using port 1043 for listen....which I will, of course, change to 143 when DC goes production. So my department isn't cut off by that switchover, can I do this? listen = *:10143,143 or this listen = 10.20.30.40:10143,143 I did look at the wiki but didn't see anything -- ==== Stewart Dean, Unix System Admin, Henderson Computer Resources Center of Bard College, Annandale-on-Hudson, New York 12504 sdean(a)bard.edu voice: 845-758-7475, fax: 845-758-7035

3 2

[Dovecot] [Fwd: Bounce action notification]
by Timo Sirainen 03 Jul '07

03 Jul '07

Anyone have ideas why this happened? Nothing special in logs, all tss(a)iki.fi deliveries went OK. Mailman's bounce log is unhelpful. Why does it say it tried to deliver to dovecot(a)dovecot.org and when it failed it disabled my account? Why doesn't it even bother saying which remote host gave an error? Grepping mail.log for 'This user' shows nothing.

5 7

[Dovecot] dovecot + winbind problem
by Gregorics Tamás 03 Jul '07

03 Jul '07

Hi! I'm having some problem with our setup. I have a linux server authenticating from a win2k3 domain controller via winbind and pam. When i try to log in I receive the following error messages: Jul 3 10:26:10 zeusz pam_winbind[20375]: user 'tamas' granted access Jul 3 10:26:10 zeusz pam_winbind[20375]: user 'tamas' OK Jul 3 10:26:10 zeusz pam_winbind[20375]: user 'tamas' granted access Jul 3 10:26:10 zeusz dovecot: auth(default): userdb(tamas,127.0.0.1): user not found from userdb Jul 3 10:26:10 zeusz dovecot: imap-login: Internal login failure: user=<tamas>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured But when i try other services which also use winbind via pam (like popa3d) i can log in without any problem. Any ideas?

2 4

[Dovecot] NameSpases
by Sergey A. Kobzar 03 Jul '07

03 Jul '07

Hi guys, I have a problem with namespases in Dovecot: namespace public { separator = / prefix = Public/ location = maildir:/home/mail/public } namespace private { separator = / prefix = inbox = yes } namespace private works well, but I can't subscribe to namespace Public in Outlooks Express, The Bat! and Mozilla Thunderbird. Outlook shows error 'Mailbox doesn't exist: Public'. Same with The Bat!. maildir:/home/mail/public exists and has correct rights: # ls -alh /home/mail/public/ total 0 drwx------ 5 mail mail 184 Jul 2 21:55 . drwxr-x--- 4 mail root 104 Jul 2 21:01 .. drwx------ 2 mail mail 48 Jul 2 21:01 cur -rw-r--r-- 1 mail mail 0 Jul 2 21:54 dovecot-shared drwx------ 2 mail mail 48 Jul 2 21:01 new -rw-r--r-- 1 mail mail 0 Jul 2 21:55 subscriptions drwx------ 2 mail mail 48 Jul 2 21:01 tmp # dovecot --version 1.0.1 # uname -rsm Linux 2.6.20-gentoo-r8 i686 Any help appreciated :) -- Sergey

2 2

[Dovecot] Leaky dovecot-auth ?
by Christian Balzer 03 Jul '07

03 Jul '07

Hello, as mentioned before, we are migrating our mailboxes from a 0.99 cluster to a 1.0.0 one. With 0.99 dovecot-auth (with LDAP as backend) was leaking quite happily and the dovecot-auth processes frequently did hit their size limit and thus were killed and restarted. Which in 0.99 at least lead to authentication failures on a busy server, as the dovecot master process just killed off the auth process w/o disabling new connections to it first and letting any current authentications finish. The activity per cluster node on the 0.99 boxes was about 700k logins (mostly pop3) per day and 5 dovecot-auth processes with a 64MB limit each. The migrated users so far are of the less active kind and on one node of the 1.0.0 cluster we see about 70k logins/day and currently the dovecot-auth process there is hovering at 123/84MB (VIRT/RES in top). It was at 121/82MB when I checked 4 hours ago and no new users have been added to that node for 2 days. Authentication backend is still LDAP, no caching, 256MB process size limit. There are just 16k users on that node at this point in time, with only 1200 distinct users generating those 70k logins/day. We will start migrating the rest of the users tomorrow and now I'm wondering: 1. How and why would the memory footprint of dovecot-auth grow when there is no change in the amount of users in the DB? 2. What will happen when the single dovecot-auth process reaches 256MB in the end? Internal housekeeping attempts of that process? A whack to the head from the master process like in 0.99 and thus more erroneous authentication failures, potentially aggravated by the fact that there is just single dovecot-auth process? I guess at the current rate of leakage we shall know the answers to #2 soon one way or another. ;) Regards, Christan -- Christian Balzer Network/Systems Engineer NOC chibi(a)gol.com Global OnLine Japan/Fusion Network Services http://www.gol.com/

3 15