- dovecot - dovecot.org

[Dovecot] Kmail client desconnection
by Jordi Espasa Clofent 27 Aug '07

27 Aug '07

Hi all, I have a Postfix+Dovecot working in beta/testing; it seems to run very fine, but one beta-tester user says that kmail informs him about frequent desconnections. My dovecot -a shows: # /etc/dovecot.conf base_dir: /var/run/dovecot log_path: info_log_path: log_timestamp: %b %d %H:%M:%S syslog_facility: mail protocols: imaps listen: [::] ssl_listen: ssl_disable: no ssl_ca_file: ssl_cert_file: /etc/pki/dovecot/certs/dovecot.pem ssl_key_file: /etc/pki/dovecot/private/dovecot.pem ssl_key_password: ssl_parameters_regenerate: 168 ssl_cipher_list: ssl_verify_client_cert: no disable_plaintext_auth: no verbose_ssl: no shutdown_clients: yes nfs_check: yes version_ignore: no login_dir: /var/run/dovecot/login login_executable: /usr/libexec/dovecot/imap-login login_user: dovecot login_greeting: Dovecot ready. login_log_format_elements: user=<%u> method=%m rip=%r lip=%l %c login_log_format: %$: %s login_process_per_connection: yes login_chroot: yes login_greeting_capability: no login_process_size: 32 login_processes_count: 3 login_max_processes_count: 128 login_max_connections: 256 valid_chroot_dirs: mail_chroot: max_mail_processes: 1024 verbose_proctitle: no first_valid_uid: 4444 last_valid_uid: 4444 first_valid_gid: 1 last_valid_gid: 0 mail_extra_groups: default_mail_env: mail_location: maildir:/var/vmail/%u mail_cache_fields: flags mail_never_cache_fields: imap.envelope mail_cache_min_mail_count: 0 mailbox_idle_check_interval: 30 mail_debug: no mail_full_filesystem_access: no mail_max_keyword_length: 50 mail_save_crlf: no mail_read_mmaped: no mmap_disable: no mmap_no_write: no lock_method: fcntl maildir_stat_dirs: no maildir_copy_with_hardlinks: yes mbox_read_locks: fcntl mbox_write_locks: fcntl mbox_lock_timeout: 300 mbox_dotlock_change_timeout: 120 mbox_min_index_size: 0 mbox_dirty_syncs: yes mbox_very_dirty_syncs: no mbox_lazy_writes: yes dbox_rotate_size: 2048 dbox_rotate_min_size: 16 dbox_rotate_days: 1 umask: 63 mail_drop_priv_before_exec: no mail_executable: /usr/libexec/dovecot/imap mail_process_size: 256 mail_plugins: mail_plugin_dir: /usr/lib64/dovecot/imap mail_log_prefix: %Us(%u): imap_max_line_length: 65536 imap_capability: imap_client_workarounds: outlook-idle pop3_no_flag_updates: no pop3_enable_last: no pop3_reuse_xuidl: no pop3_lock_session: no pop3_uidl_format: %08Xu%08Xv pop3_client_workarounds: pop3_logout_format: top=%t/%p, retr=%r/%b, del=%d/%m, size=%s auth default: mechanisms: plain realms: default_realm: cache_size: 0 cache_ttl: 3600 executable: /usr/libexec/dovecot/dovecot-auth user: nobody chroot: username_chars: abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890.-_@ username_translation: username_format: master_user_separator: anonymous_username: anonymous krb5_keytab: verbose: no debug: no debug_passwords: no ssl_require_client_cert: no ssl_username_from_cert: no count: 1 worker_max_count: 30 process_size: 256 passdb: driver: sql args: /etc/dovecot_mysql.conf deny: no pass: no master: no userdb: driver: sql args: /etc/dovecot_mysql.conf userdb: driver: prefetch args: socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix master: path: /var/run/dovecot/auth-master mode: 432 user: vmail group: vmail ¿How can I debbug this behaviour or how can I determine if this issue is a client or dovecot fail? TIA.

3 6

Re: [Dovecot] Log format question...
by Mike Cisar 27 Aug '07

27 Aug '07

> > What about if %u were permanently changed... but %n and %d left with > > the original values. It would seem that those people relying on the > > behavior of %u being stripped would not likely be using nor caring > > about the values of %n and %d since they are essentially discarding > > them anyway? That way you have %u acting as the "authentication > > username", and %n and %d containing the "username" and "domain" (as > sent by the client). > > Maybe, but it's still an incompatible change that could break existing > installations. Also you're thinking only about the case when you want > to drop the domain. auth_username_format can be used for a lot of other > things as well. It gets confusing if %n and %d sometimes change, but > sometimes don't. True, I hadn't thought about that. I'm not much of a C programmer especially in the scheme of something as complex as Dovecot... but if you could be so kind as to point me within a couple of metres of the location in the code where the changes to %n and %d get made by auth_username_format, I'll try to patch something myself locally on my servers to get the result I need for now and leave it up to you to decide if it's worthwhile adding additional variables at some point down the road to expose the original values. Cheers, >>>>> Mike <<<<<

1 0

[Dovecot] authentication with mysql - problem with table name escaping
by XhE 26 Aug '07

26 Aug '07

Found a problem with dovecot 1.0.3 and mysql authentication I got a problem with escaping of mysql table names. Usually, when a mysql table name has some special character (in my case there is a table beginning with the # character) one has to put into these special quotes --- ` ---; others like ' oder " are not recognized. But dovecot somehow doesn't allow me to do that. After switchting auth_verbose to true I get entries in /var/log/messages stating: Password query failed: Incorrect table name ' ' Regards, XhE

4 5

[Dovecot] Authentication using only TLS client certificates
by Martin Lambers 26 Aug '07

26 Aug '07

Hi! I'd like to configure dovecot to use only TLS client certificates for authentication. After the user presented a client certificate and that certificate was verified, no password-based authentication should be necessary anymore. Is this currently possible? Or would this require support for the SASL EXTERNAL mechanism? Regards, Martin

2 1

[Dovecot] Log format question...
by Mike Cisar 26 Aug '07

26 Aug '07

Trying to do a little (cosmetic) tweak to my configuration and just don't seem to be able to come up with a set of options that works. My POP/IMAP configuration is working just fine in terms of mail retrieval, etc. What I'm seeing in the logs now is... Aug 13 18:15:17 test2 dovecot: pop3-login: Login: user=<support>, method=PLAIN, rip=10.11.12.12, lip=10.11.12.13 I would prefer (for ease of troubleshooting) to have "user=<support(a)realm.com>" appear in the logs instead, to save having to figure the realm from the IP value. Have played around with various combinations of %u, %n and %d and all I seem to be able to accomplish is break the working part of the config. I'm sure the answer is probably something simple, or some combination I haven't tried... but it's certainly escaping me at the moment. The relevant (I think) part of my config follows. The usernames in the mentioned passwd and shadow files are in the 'user' format (ie. not 'user@realm'). --snip-- mail_location = mbox:/vhome/%l/home/%n/mail:INBOX=/var/spool/vmail/%l/%n auth_username_format = %n passdb passwd-file { args = /etc/vmail/shadow.%l } userdb passwd-file { args = /etc/vmail/passwd.%l } login_log_format_elements = user=<%u> method=%m rip=%r lip=%l %c --snip-- Hints and suggestions appreciated! Cheers, >>>>> Mike <<<<<

2 3

[Dovecot] removing IMAP keywords?
by martin f krafft 25 Aug '07

25 Aug '07

Hi there, I found that with an IMAP command like <unique-leader> STORE 1 +FLAGS (testflag) I can set arbitrary flags on mails through the dovecot IMAP daemon. This rules. Now I wonder, however, how I can remove those flags, which become properties of the folder, really. For instance, after the above, SELECT on the containing folder gives: * FLAGS (\Answered \Flagged \Deleted \Seen \Draft testflag) * OK [PERMANENTFLAGS (\Answered \Flagged \Deleted \Seen \Draft testflag \*)] Flags permitted. Even if I remove the flag from all messages or even delete all messages in the folder, the flag stays on the folder. Is there an IMAP way of removing flags from a folder? Also, does someone know where I can find specification on what characters are allowed for keywords? RFC 3501 is strangely quiet on this, or I am blind. Thanks, -- martin; (greetings from the heart of the sun.) \____ echo mailto: !#^."<*>"|tr "<*> mailto:" net@madduck "gilmour's guitar sounds good whether you've got a bottle of cider in your hand or a keyboard and a mouse." -- prof. bruce maxwell spamtraps: madduck.bogus(a)madduck.net

4 6

[Dovecot] Dovecot IMAP/POP3 Proxy with LDAP
by Raphael Bittencourt S. Costa 24 Aug '07

24 Aug '07

Hello all, I'm having problems to make Dovecot proxy work, I configured it following dovecot's site. See my test below: It accepts login and password and then closes the connection. bastion01:~/build# telnet localhost 110 Trying 127.0.0.1... Connected to localhost. Escape character is '^]'. +OK Dovecot ready. user raphael.costa(a)xxxx.com.br +OK pass xxxxxx +OK Logged in. Connection closed by foreign host. See that it get the host information but still try to access the mbox locally. Aug 16 16:22:36 bastion01 dovecot: auth(default): ldap(raphael.costa(a)xxxx.com.br,127.0.0.1): bind: dn=cn=raphael.costa,ou=xxxx.com.br,ou=accounts,o=comMail Aug 16 16:22:36 bastion01 dovecot: auth(default): client out: OK 2 user=raphael.costa(a)xxxx.com.br host=mailserver-01.xxxx.com.br Aug 16 16:22:36 bastion01 dovecot: auth(default): master in: REQUEST 1 3894 2 Aug 16 16:22:36 bastion01 dovecot: POP3(raphael.costa(a)xxxx.com.br): maildir: access(/dev/null/Maildir, rwx): failed: Not a directory Aug 16 16:22:36 bastion01 dovecot: POP3(raphael.costa(a)xxxx.com.br): maildir: couldn't find root dir Aug 16 16:22:36 bastion01 dovecot: POP3(raphael.costa(a)xxxx.com.br): mbox: root: access(/dev/null/mail, rwx) failed: Not a directory Aug 16 16:22:36 bastion01 dovecot: POP3(raphael.costa(a)xxxx.com.br): mbox: root: access(/dev/null/Mail, rwx) failed: Not a directory Aug 16 16:22:36 bastion01 dovecot: POP3(raphael.costa(a)xxxx.com.br): mbox: checking if we are chrooted: Aug 16 16:22:36 bastion01 dovecot: POP3(raphael.costa(a)xxxx.com.br): mbox autodetect: data= Aug 16 16:22:36 bastion01 dovecot: POP3(raphael.costa(a)xxxx.com.br): mbox autodetect: has .imap/: stat(/.imap) failed: No such file or directory Aug 16 16:22:36 bastion01 dovecot: POP3(raphael.costa(a)xxxx.com.br): mbox autodetect: has inbox: stat(/inbox) failed: No such file or directory Aug 16 16:22:36 bastion01 dovecot: POP3(raphael.costa(a)xxxx.com.br): mbox autodetect: has mbox: stat(/mbox) failed: No such file or directory Aug 16 16:22:36 bastion01 dovecot: POP3(raphael.costa(a)xxxx.com.br): mbox: root mail directory not found My dovecot-ldap.conf: pass_attrs = uid=user,userPassword=password,mailMessageStore=userdb_home,qmailUID=userdb_uid,qmailGID=userdb_gid,proxy,mailHost=host What am I doing wrong? Raphael Costa

3 4

[Dovecot] [PATCH] Deliver doesn't enforce userdb quotas
by Sergio Lopez 24 Aug '07

24 Aug '07

Hello all, While configuring the latest stable version of Dovecot (1.0.3), I've noticed that "deliver" always uses the quota arguments found in the configuration file, completely ignoring what userdb sends to it through the authentication service. This doesn't happen in the previous version I was used (1.0.rc15, comes with Debian "etch"). After digging a little into the code, I've found that "expand_envs" is being called after "auth_client_put_user_env", thus clobbering the "QUOTA" environment variable. The attached patch changes "expand_envs" to avoid setting "QUOTA" if it has been exported before. Thanks! -- Sergio López - <sergio.lopez(a)nologin.es> Nologin Consulting S.L. - http://nologin.es

2 1

[Dovecot] max_mail_processes
by Tony Tsang 24 Aug '07

24 Aug '07

Hello, I have some doubts about max_mail_process option on dovecot.conf. When I set to 3, only 2 clients can be logged in at the same time. when I set it to 2, only 1 clients can be logged in. Why is the maximum number of concurrent clients is always 1 less than max_mail_process? Is any other process is also counted as mail_process other than imap and pop3? Tony

2 1

[Dovecot] Dovecot on different server than MTA
by FORMER 03 | Baltasar Cevc 24 Aug '07

24 Aug '07

Hi, I'm setting up our new mail system using dovecot as mailbox server. As our goal is to have many many small redundant (virtual) servers as components, for example a mailhub (just relaying mail) and a frontend smtp server (just accepting or denying mail in the first place and then forwarding it to the mailhub), etc. I want to run Dovecot on a different server than the main MTAs. The mailbox server is the only service that cannot be made redundant in an easy way (the servers don't have common storage and we can't add that easily), thus I prefer not to have it on the same server as the relay. Is there a best practice to do that? My current ideas are either to implement a stripped-down Postfix in the Dovecot server or to use some qpsmtpd setup there, both just to call the Dovecot delivery program. SMTP will be the communication protocol for the components except dovecot. (e.g. the virus scanner will be implemented as SMTP proxy). I'm quite bad at ASCII art, but I'll try anyways to illustrate the setup: I <--> [public incoming MX] -------------\ N | T \|/ E <--> [customer mailrelay] -----> [Postfix Mailhub] <====> virusscanner R | | N <-------outgoing mails-------------/ | E | T <--> [dovecot mailstore] <-mail delivery Each of the subsystems will be on a different virtual server in order to have small systems with distinct functions and to improve scalability. Everything except the dovecot server is planned to be duplicated on two different hardware machines (e.g. mx-in1 on server1, mx-in2 on server 2, mailhub1 on server1, mailhub2 on server2, virusscanner on server 2 and 3, etc. or something similar). Thanx, Baltasar -- _____ FORMER 03 GmbH _____ infanteriestra§e 19 haus 6 eg _____ 80797 muenchen _____ www.former03.de _____ phone +49 - 176 - 23 22 08 22

3 2