- dovecot - dovecot.org

Bug Report: Missing parent folders will cause some clients to not retrieve messages
by Brendon Meyer 09 Oct '24

09 Oct '24

Morning/Evening All, This is a general bug report but it applies to most versions of Dovecot that I have tested to date. I tried to find a previous case where something like this has been reported and for the life of me, I can't find one so if I am duplicating an existing bug report - please let me know. The server platform I am using is FreeBSD 14.1-STABLE (custom build) but that really doesn't have much of a bearing as I was able to recreate the problem on Linux as well as different FreeBSD versions and on different architectures going back as FreeBSD 12 under SPARC). Dovecot version is dovecot-2.3.21_6, but I have tried earlier versions as well and the behaviour is pretty consistent. Apple mail versions are multiple, but in the example I put forward below, I am specifically talking about v12.4 which came with OSX 10.14.6 (last release of Mojave). You get the same behaviour out of later versions of Apple mail that come with later relesaes of OSX/MacOS Thunderbird versions are multiple, but in the example I put forward I am using 115.15.0 (64-bit) under Linux. The behaviour is consistent with earlier versions as well as different platforms (such as Thunderbird on OSX, and Windows). Description of problem: When creating subfolders with tools such as imapfilter, if the parent of the subfolder does not exist, Dovecot will allow that folder to be created, and the tool will allow you to populate that folder with messages. The issue then rears it ugly head when you say use Thunderbird and the messages in this subfolder are not visible. This behaviour is not limited to Thunderbird (e.g. Outlook) but I am using Thunderbird as an example here. Oddly enough, the Apple mail client is *not* impacted in quite the same way (though it is impacted but the behaviour is very subtly different). Allow me to explain with a practical example as to what is happening, and I will parts of my *actual* config here to highlight the issue. I have a imapfilter task that routinely archives messages from the likes of "Sent". Easy enough. It takes each message and drops it in an Archives/sent-mail folder with the year as a parent and then inside that is the subfolders of YYYY-MM with the individual months. So looking at it, it looks something like this: Archives/sent-mail/YYYY/YYYY-MM The generated imapfilter rule that is used looks something like this: sent_202312_bgm = bgm['Sent']:sent_since('01-Dec-2023') * bgm['Sent']:sent_before('01-Jan-2024') sent_202312_bgm:move_messages(bgm['Archives/sent-mail/2023/2023-12']) This is all pretty simple - if the folder "Archives/sent-mail/2023/2023-12" does not exist it will create it and when done, it will then populate the folder with messages from "Sent". The issue is that if the "2023" parent folder does not exist, then some mail clients (as identified above - Thunderbird is an example) will never sync that mail. The workaround is to manually create the YYYY parent folders so that when imapfilter runs and creates the YYYY-MM subfolders then they are visible. I said that Apple mail is a weird edge case example. Its behaviour is not exactly simple or consistent either when missing parent folders, but you at least get some visual idea that something is wrong. Screenshots are probably doing going to come across very well in a forum group but allow me to describe what you see in Apple mail. In Apple mail, if the parent folder exists (for example say I use the year 2019), then see the subfolder in a "grey" colour with the name next to it and all is good. This folder *is* visible to Thunderbird and all the Apple mail functionality works. If the parent folder does *NOT* exist, this is where it gets a little weird. In my example, I have a year of 2023. That parent folder does *NOT* exist. That means that if you look at the Thunderbird view of the Archives/send-mail, you don't see a 2023 parent folder. Apple Mail *DOES* see the parent *BUT* two things are a bit off about it. #1. When you look at the folder in Apple mail, instead of being grey, it appears as a white colour. You can drill into the folder and see the YYYY-MM subfolders inside, but generally it doesn't appear to "work consistently". #2. Searches don't work correctly. Manually renaming the subfolders in Apple mail, then manually creating a parent folder and then moving everything back restores full functionality and also means that other mail clients such as Thunderbird for example will then see all the 2023 subfolders (e.g. 2023-01, 2023-02, etc). So ... is this a bug in Dovecot? If so ... has it been previously reported and if not, do I get a bug named after me? :P /BGM

4 4

aliases
by Сергей Сергей 09 Oct '24

09 Oct '24

Hello. Tell me how to set up mail aliases so that mail from one mailbox is forwarded to another mailbox. What configs need to be edited and what to enter. Thank you

3 3

LAYOUT=index requires mailbox_list _index=yes
by Marc 07 Oct '24

07 Oct '24

I am adding a namespace with LAYOUT=index to an existing configuration, and get this notification: LAYOUT=index requires mailbox_list_index=yes Maybe better to just not risk it and add LAYOUT=fs to my existing mail_location=mdbox: lines?

1 0

Namespace for seperate Storage of Archive
by Christian Großegger 05 Oct '24

05 Oct '24

Hi everyone, I found the Solution myself. The key was to simply create an unnamed mailbox directive so that the namespace prefix directly results into an mailbox that Thunderbirds shows as the Archive. Thanks everbody on the dovecot team for making such a brilliant Software! Greetings! Christian namespace inbox { inbox = yes location = mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Junk { auto = subscribe special_use = \Junk } mailbox Sent { auto = subscribe special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { auto = subscribe special_use = \Trash } prefix = separator = / } namespace archivns { prefix = Archive/ <--- this is the Name which now appears at the same Level then Sent/Draft/... location = maildir:/mnt/mails2/%u separator = / mailbox { <--- here a name is omitted auto = subscribe special_use = \Archive } }

2 2

dovecot/Pigeonhole sieve sets seen flag
by Hadmut Danisch 05 Oct '24

05 Oct '24

Hi, I'm using dovecot, running Ubuntu 24.04 with dovecot 1:2.3.21+dfsg1-2ubuntu6 and postfix. Since Ubuntu dropped mailfilter for 24.04, I am replacing mailfilter with the sieve filter. Problem/Question: I am using something like if header :matches "Subject" "htest" { addflag "$label1"; fileinto :create "Test.${year}.${month}"; stop; } following https://doc.dovecot.org/2.3/configuration_manual/sieve/examples/ which works, but not as expected: When having the addflag, the mail is delivered as seen, i.e. put in the /cur directory of the Maildir folder. Without the addflag, it is put into /new , where it belongs to (as unseen). Why does addflag "$label1"; mark the Mail as seen? regards Hadmut (please respond directly, I am not on this list)

2 1

Helping doveadm sync detect moves between Maildir mailboxes? (reproducible example of bad behaviour)
by falsifian＠falsifian.org 02 Oct '24

02 Oct '24

Hi, Moving mail files between Maildir mailboxes often confuses doveadm sync: I end up with copies in both the original and new maildir. Exact details and script to reproduce follow. I can work around this by running doveadm move, but it does not fit well with my workflow, which is based on paths to mail files (using mblaze as my mail client). Two questions: 1. Is there anything I can do to help dovecot notice the moves, other than using doveadm move instead of just mv? I have tried liberal use of force-resync but the problem is still there. 2. Is this a bug? Details: OS: OpenBSD current $ dovecot --version 2.3.21.1 (d492236fa0) config: My repro script below uses a one-line config, only setting mail_location. (An OpenBSD 7.5 server running Dovecot 2.3.21 is involved in my real setup, but I was able to reproduce it locally without the server involved.) To reproduce: (shell script follows) - Make two maildirs "a" and "b", each with a subfolder ".Archive". - Manually write a mail file to a/cur. - doveadm sync - force-resync everything - manually move the file to a/.Archive/cur - force-resync everything again - doveadm sync - Now the mail file appears four times: in a, a/.Archive, b, and b/.Archive. Script to do the above follows my signature. -- James #!/bin/sh set -e # Run in a new directory with two maildirs named a and b and a simple config. mkdir bug; cd bug mkdir -p {a,b}/{,.Archive/}{cur,new,tmp} cat > dovecot.conf <<EOF mail_location=maildir:$PWD/a EOF # Deliver an email and sync. EXAMPLE_ID=12345.R67890.example.com cat > a/cur/$EXAMPLE_ID:2, <<EOF some email EOF doveadm -c dovecot.conf sync maildir:b # Move the email and sync again. Run force-resync between steps in case it helps. doveadm -c dovecot.conf force-resync INBOX doveadm -c dovecot.conf force-resync Archive doveadm -c dovecot.conf -o mail_location=maildir:$PWD/b force-resync INBOX doveadm -c dovecot.conf -o mail_location=maildir:$PWD/b force-resync Archive mv a/cur/$EXAMPLE_ID* a/.Archive/cur doveadm -c dovecot.conf force-resync INBOX doveadm -c dovecot.conf force-resync Archive doveadm -c dovecot.conf -o mail_location=maildir:$PWD/b force-resync INBOX doveadm -c dovecot.conf -o mail_location=maildir:$PWD/b force-resync Archive doveadm -c dovecot.conf sync maildir:b echo in a: doveadm -c dovecot.conf -fflow fetch 'mailbox guid' all echo echo in b: doveadm -c dovecot.conf -fflow -o mail_location=maildir:$PWD/b fetch 'mailbox guid' all

2 4

Namespace for seperate Storage of Archive
by Christian Großegger 30 Sep '24

30 Sep '24

Hi everyone, I would like to move the "Archives" Folder for every user from my default storage to another storage in the backend, while maintaining the current frontend view of the IMAP Mailboxstructure. Because I didn't manage to get it to work properly on my production server, I made a separate Testserver. My problem is, that I don't know what to put in the "prefix" section of the Namespace, so that the Archive Folder is on the same folder/mailbox hierarchy level as the ones in the default namespace (Sent Messages, Drafts ...). I have read the Namespace RFC (rfc2342) and there is one example which uses the Tilde ~ Character as the Namespace prefix - put the rfc doesn't address the tilde, it only has it in one of the examples (Example 5.4). Because ~ often means 'base folder' I thought this would work. But it doesn't. The Thunderbird client shows: Rootdir/Sent but Rootdir/~/Archive I am aware I can solve this with symlinks, but I would like to do it properly with namespaces. Could you please tell me what I am missing? In case this is an Thunderbird Issue, could you please point out, what I don't understand? Thank you! Kind Regards Christian dovecot --version 2.3.19.1 (9b53102964) dovecot -n # 2.3.19.1 (9b53102964): /etc/dovecot/dovecot.conf # Pigeonhole version 0.5.19 (4eae2f79) # OS: Linux 6.1.0-25-amd64 x86_64 Debian 12.7 # Hostname: mailserver.lan auth_debug = yes auth_mechanisms = plain login auth_verbose = yes debug_log_path = /var/log/dovecot/debug.log disable_plaintext_auth = no info_log_path = /var/log/dovecot/info.log log_path = /var/log/dovecot/error_or_warn.log mail_gid = user mail_home = /mnt/mails/%u mail_location = maildir:~/Maildir mail_uid = user namespace archivns { inbox = no location = maildir:/mnt/mails2/%u mailbox Archive { auto = subscribe special_use = \Archive } prefix = ~/ separator = / } namespace inbox { inbox = yes location = mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Junk { auto = subscribe special_use = \Junk } mailbox Sent { auto = subscribe special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { auto = subscribe special_use = \Trash } prefix = separator = / } passdb { args = /etc/dovecot/passwd driver = passwd-file } protocols = imap service imap-login { inet_listener imap { port = 143 } } ssl = no userdb { args = /etc/dovecot/passwd driver = passwd-file }

2 1

Remove hard-coded paths in doc/solr-config-9.xml
by Saman Ghannadzadeh 30 Sep '24

30 Sep '24

Hi, Dovecote includes a config file for use with Solr 9, at 'doc/solr-config-9.xml'. However, this file has two problems: - it hard codes the path to the Solr installation - it hard codes version numbers of Icu/Lucene packages This issue can be be easily fixed by using the '${solr.install.dir}' variable in that config file. The attached patch will fix both issues. Best wishes, Saman Ghannadzaded diff -crB a/doc/solr-config-9.xml b/doc/solr-config-9.xml *** a/doc/solr-config-9.xml 2024-09-29 20:50:42.873229769 +0100 --- b/doc/solr-config-9.xml 2024-09-29 20:58:53.507638810 +0100 *************** *** 75,82 ****   ! <lib dir="/opt/solr/modules/analysis-extras/lib" regex="icu4j-70.1.jar"/> ! <lib dir="/opt/solr/modules/analysis-extras/lib" regex="lucene-analysis-icu-9.8.0.jar"/>   ! <lib dir="${solr.install.dir}/modules/analysis-extras/lib" regex="icu4j-.*\.jar"/> ! <lib dir="${solr.install.dir}/modules/analysis-extras/lib" regex="lucene-analysis-icu-.*\.jar"/> <!-- an exact 'path' can be used instead of a 'dir' to specify a specific jar file. This will cause a serious error to be logged if it can't be loaded.

1 0

Dovecot trying to fetch a directory that contains a typo, couldn't figure out where to fix it
by Yassine Chaouche 29 Sep '24

29 Sep '24

Dear list, I am encountering an unusual issue where Thunderbird is incorrectly accessing my "Messagerie" folder. While there are no visible errors within Thunderbird, Dovecot logs reveal several permission-denied messages linked to the folder structure. Sep 29 16:45:20 imap(a.chaouche(a)domain.tld): Debug: acl vfile: file /var/vmail/domain.tld/a.chaouche/dovecot/../.Messagerie/dovecot-acl not found Sep 29 16:45:20 imap(a.chaouche(a)domain.tld): Error: open(/var/vmail/domain.tld/a.chaouche/dovecot/../.Messagerie/cur/-Tlevel=matching) failed: Permission denied (euid=1001(vmail) egid=1001(vmail) missing +r perm: /var/vmail/a lgerian-radio.dz/a.chaouche/dovecot/../.Messagerie/cur/-Tlevel=matching) Sep 29 16:45:20 imap(a.chaouche(a)domain.tld): Error: open(/var/vmail/domain.tld/a.chaouche/dovecot/../.Messagerie/cur/-Tlevel=matching) failed: Permission denied (euid=1001(vmail) egid=1001(vmail) missing +r perm: /var/vmail/a lgerian-radio.dz/a.chaouche/dovecot/../.Messagerie/cur/-Tlevel=matching) Sep 29 16:45:20 imap(a.chaouche(a)domain.tld): Info: Disconnected: Internal error occurred. Refer to server log for more information. [2024-09-29 16:45:20] in=1215 out=278901 Sep 29 16:45:20 imap(a.chaouche(a)domain.tld): Debug: acl vfile: file /var/vmail/domain.tld/a.chaouche/dovecot/../.Drafts/dovecot-acl not found Notably, the path includes a suspicious "-Tlevel=matching" string, which seems to have originated from a typo during the use of a sieve-test command I recently used, something like this: $ sieve-test -Tlevel=matching ../../dovecot/sieve/perso.sieve ./1727184793.M761376P16269.messagerie-prep\,S=4871\,W=5001\:2\,Sb -t - Despite a thorough search on all the Dovecot configuration directory, no such entry for "matching" exists. root(a)messagerie-prep[10.10.10.19] /var/vmail/algerian-radio.dz/a.chaouche # grep matching -r dovecot/ root(a)messagerie-prep[10.10.10.19] /var/vmail/algerian-radio.dz/a.chaouche # This issue appears exclusive to Thunderbird, as the webmail client Roundcube functions normally, indicating a client-specific error. Any insights on resolving this discrepancy would be greatly appreciated. Config below: doveconf -n root(a)messagerie-prep[10.10.10.19] /var/vmail/algerian-radio.dz/a.chaouche # doveconf -n # 2.2.13: /etc/dovecot/dovecot.conf # OS: Linux 3.16.0-6-amd64 x86_64 Debian 8.11 auth_mechanisms = plain login auth_verbose = yes deliver_log_format = <%f>:%s %$ disable_plaintext_auth = no log_path = /var/log/dovecot.log login_log_format_elements = user=<%u> method=%m rip=%r lip=%l lport=%a service=%s ssl=%k mail_debug = yes mail_location = Maildir:~/../ mail_plugins = " quota acl notify mail_log" managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave editheader namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = INBOX. separator = . } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { acl = vfile mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename append mail_log_fields = uid box msgid from subject quota = maildir:User quota quota_status_nouser = DUNNO quota_status_overquota = 552 5.2.2 Mailbox is full quota_status_success = DUNNO quota_warning = storage=95%% quota-socket 95 %u quota_warning2 = storage=80%% quota-socket 80 %u sieve = ~/.dovecot.sieve sieve_before = /var/vmail/mailfilters/spam.sieve sieve_before2 = ~/backup.sieve sieve_dir = ~/sieve sieve_extensions = +editheader sieve_global_dir = /var/vmail/mailfilters/ sieve_max_redirects = 0 } postmaster_address = root(a)algerian-radio.dz protocols = " imap lmtp sieve pop3" service auth { unix_listener /var/spool/postfix/private/auth { mode = 0666 } } service imap-postlogin { executable = script-login /var/vmail/mailfilters/postlogin user = root } service imap { executable = imap } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0600 user = postfix } } service quota-script { executable = script /root/SCRIPTS/MAIL/quotawarning.sh unix_listener quota-socket { user = vmail } user = root } service quota-status { client_limit = 1 executable = quota-status -p postfix unix_listener /var/spool/postfix/private/quota-status-socket { group = postfix mode = 0600 user = postfix } } ssl_cert = </etc/ssl/certs/algerian-radio.dz.pub ssl_key = </etc/ssl/private/algerian-radio.dz.priv userdb { args = uid=vmail gid=vmail home=/var/vmail/%d/%n/dovecot default_fields = plain_pass=%w driver = static } protocol lmtp { mail_plugins = " quota acl notify mail_log sieve quota" } protocol imap { mail_plugins = " quota acl notify mail_log imap_quota imap_acl" } local_name mail.radioalgerie.dz { ssl_cert = </etc/ssl/radioalgerie.pub ssl_key = </etc/ssl/private/radioalgerie.priv } doveconf # 2.2.13: /etc/dovecot/dovecot.conf # OS: Linux 3.16.0-6-amd64 x86_64 Debian 8.11 # NOTE: Send doveconf -n output instead when asking for help. auth_anonymous_username = anonymous auth_cache_negative_ttl = 1 hours auth_cache_size = 0 auth_cache_ttl = 1 hours auth_debug = no auth_debug_passwords = no auth_default_realm = auth_failure_delay = 2 secs auth_gssapi_hostname = auth_krb5_keytab = auth_master_user_separator = auth_mechanisms = plain login auth_proxy_self = auth_realms = auth_socket_path = auth-userdb auth_ssl_require_client_cert = no auth_ssl_username_from_cert = no auth_use_winbind = no auth_username_chars = abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890.-_@ auth_username_format = %Lu auth_username_translation = auth_verbose = yes auth_verbose_passwords = no auth_winbind_helper_path = /usr/bin/ntlm_auth auth_worker_max_count = 30 base_dir = /var/run/dovecot config_cache_size = 1 M debug_log_path = default_client_limit = 1000 default_idle_kill = 1 mins default_internal_user = dovecot default_login_user = dovenull default_process_limit = 100 default_vsz_limit = 256 M deliver_log_format = <%f>:%s %$ dict_db_config = director_doveadm_port = 0 director_mail_servers = director_servers = director_user_expire = 15 mins director_username_hash = %u disable_plaintext_auth = no dotlock_use_excl = yes doveadm_allowed_commands = doveadm_password = doveadm_port = 0 doveadm_socket_path = doveadm-server doveadm_worker_count = 0 dsync_alt_char = _ dsync_remote_cmd = ssh -l%{login} %{host} doveadm dsync-server -u%u -U first_valid_gid = 1 first_valid_uid = 500 hostname = imap_capability = imap_client_workarounds = imap_id_log = imap_id_send = name * imap_idle_notify_interval = 2 mins imap_logout_format = in=%i out=%o imap_max_line_length = 64 k imap_metadata = no imap_urlauth_host = imap_urlauth_logout_format = in=%i out=%o imap_urlauth_port = 143 imapc_features = imapc_host = imapc_list_prefix = imapc_master_user = imapc_max_idle_time = 29 mins imapc_password = imapc_port = 143 imapc_rawlog_dir = imapc_ssl = no imapc_ssl_verify = yes imapc_user = import_environment = TZ CORE_OUTOFMEM CORE_ERROR LISTEN_PID LISTEN_FDS info_log_path = instance_name = dovecot last_valid_gid = 0 last_valid_uid = 0 lda_mailbox_autocreate = no lda_mailbox_autosubscribe = no lda_original_recipient_header = libexec_dir = /usr/lib/dovecot listen = *, :: lmtp_address_translate = lmtp_proxy = no lmtp_rcpt_check_quota = no lmtp_save_to_detail_mailbox = no lock_method = fcntl log_path = /var/log/dovecot.log log_timestamp = "%b %d %H:%M:%S " login_access_sockets = login_greeting = Dovecot ready. login_log_format = %$: %s login_log_format_elements = user=<%u> method=%m rip=%r lip=%l lport=%a service=%s ssl=%k login_trusted_networks = mail_access_groups = mail_always_cache_fields = mail_attachment_dir = mail_attachment_fs = sis posix mail_attachment_hash = %{sha1} mail_attachment_min_size = 128 k mail_attribute_dict = mail_cache_fields = flags mail_cache_min_mail_count = 0 mail_chroot = mail_debug = yes mail_fsync = optimized mail_full_filesystem_access = no mail_gid = mail_home = mail_location = Maildir:~/../ mail_log_prefix = "%s(%u): " mail_max_keyword_length = 50 mail_max_lock_timeout = 0 mail_max_userip_connections = 10 mail_never_cache_fields = imap.envelope mail_nfs_index = no mail_nfs_storage = no mail_plugin_dir = /usr/lib/dovecot/modules mail_plugins = " quota acl notify mail_log" mail_prefetch_count = 0 mail_privileged_group = mail_save_crlf = no mail_shared_explicit_inbox = no mail_temp_dir = /tmp mail_temp_scan_interval = 1 weeks mail_uid = mailbox_idle_check_interval = 30 secs mailbox_list_index = no maildir_broken_filename_sizes = no maildir_copy_with_hardlinks = yes maildir_empty_new = no maildir_stat_dirs = no maildir_very_dirty_syncs = no managesieve_client_workarounds = managesieve_implementation_string = Dovecot Pigeonhole managesieve_logout_format = bytes=%i/%o managesieve_max_compile_errors = 5 managesieve_max_line_length = 65536 managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave editheader master_user_separator = mbox_dirty_syncs = yes mbox_dotlock_change_timeout = 2 mins mbox_lazy_writes = yes mbox_lock_timeout = 5 mins mbox_md5 = apop3d mbox_min_index_size = 0 mbox_read_locks = fcntl mbox_very_dirty_syncs = no mbox_write_locks = fcntl dotlock mdbox_preallocate_space = no mdbox_purge_preserve_alt = no mdbox_rotate_interval = 0 mdbox_rotate_size = 2 M mmap_disable = no namespace inbox { disabled = no hidden = no ignore_on_failure = no inbox = yes list = yes location = mailbox Drafts { auto = no driver = special_use = \Drafts } mailbox Junk { auto = no driver = special_use = \Junk } mailbox Sent { auto = no driver = special_use = \Sent } mailbox "Sent Messages" { auto = no driver = special_use = \Sent } mailbox Trash { auto = no driver = special_use = \Trash } prefix = INBOX. separator = . subscriptions = yes type = private } passdb { args = /etc/dovecot/dovecot-sql.conf.ext default_fields = deny = no driver = sql master = no name = override_fields = pass = no result_failure = continue result_internalfail = continue result_success = return-ok skip = never } plugin { acl = vfile mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename append mail_log_fields = uid box msgid from subject quota = maildir:User quota quota_status_nouser = DUNNO quota_status_overquota = 552 5.2.2 Mailbox is full quota_status_success = DUNNO quota_warning = storage=95%% quota-socket 95 %u quota_warning2 = storage=80%% quota-socket 80 %u sieve = ~/.dovecot.sieve sieve_before = /var/vmail/mailfilters/spam.sieve sieve_before2 = ~/backup.sieve sieve_dir = ~/sieve sieve_extensions = +editheader sieve_global_dir = /var/vmail/mailfilters/ sieve_max_redirects = 0 } pop3_client_workarounds = pop3_deleted_flag = pop3_enable_last = no pop3_fast_size_lookups = no pop3_lock_session = no pop3_logout_format = top=%t/%p, retr=%r/%b, del=%d/%m, size=%s pop3_no_flag_updates = no pop3_reuse_xuidl = no pop3_save_uidl = no pop3_uidl_duplicates = allow pop3_uidl_format = %08Xu%08Xv pop3c_host = pop3c_master_user = pop3c_password = pop3c_port = 110 pop3c_quick_received_date = no pop3c_rawlog_dir = pop3c_ssl = no pop3c_ssl_verify = yes pop3c_user = %u postmaster_address = root(a)algerian-radio.dz protocols = " imap lmtp sieve pop3" quota_full_tempfail = no recipient_delimiter = + rejection_reason = Your message to <%t> was automatically rejected:%n%r rejection_subject = Rejected: %s replication_dsync_parameters = -d -N -l 30 -U replication_full_sync_interval = 1 days replication_max_conns = 10 replicator_host = replicator replicator_port = 0 sendmail_path = /usr/sbin/sendmail service aggregator { chroot = . client_limit = 0 drop_priv_before_exec = no executable = aggregator extra_groups = fifo_listener replication-notify-fifo { group = mode = 0600 user = } group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = unix_listener replication-notify { group = mode = 0600 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service anvil { chroot = empty client_limit = 0 drop_priv_before_exec = no executable = anvil extra_groups = group = idle_kill = 4294967295 secs privileged_group = process_limit = 1 process_min_avail = 1 protocol = service_count = 0 type = anvil unix_listener anvil-auth-penalty { group = mode = 0600 user = } unix_listener anvil { group = mode = 0600 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service auth-worker { chroot = client_limit = 1 drop_priv_before_exec = no executable = auth -w extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 1 type = unix_listener auth-worker { group = mode = 0600 user = $default_internal_user } user = vsz_limit = 18446744073709551615 B } service auth { chroot = client_limit = 0 drop_priv_before_exec = no executable = auth extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener /var/spool/postfix/private/auth { group = mode = 0666 user = } unix_listener auth-client { group = mode = 0600 user = $default_internal_user } unix_listener auth-login { group = mode = 0600 user = $default_internal_user } unix_listener auth-master { group = mode = 0600 user = } unix_listener auth-userdb { group = mode = 0666 user = $default_internal_user } unix_listener login/login { group = mode = 0666 user = } unix_listener token-login/tokenlogin { group = mode = 0666 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service config { chroot = client_limit = 0 drop_priv_before_exec = no executable = config extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = config unix_listener config { group = mode = 0600 user = } user = vsz_limit = 18446744073709551615 B } service dict { chroot = client_limit = 1 drop_priv_before_exec = no executable = dict extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = unix_listener dict { group = mode = 0600 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service director { chroot = . client_limit = 0 drop_priv_before_exec = no executable = director extra_groups = fifo_listener login/proxy-notify { group = mode = 00 user = } group = idle_kill = 4294967295 secs inet_listener { address = port = 0 reuse_port = no ssl = no } privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener director-admin { group = mode = 0600 user = } unix_listener director-userdb { group = mode = 0600 user = } unix_listener login/director { group = mode = 00 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service dns_client { chroot = client_limit = 1 drop_priv_before_exec = no executable = dns-client extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = unix_listener dns-client { group = mode = 0666 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service doveadm { chroot = client_limit = 1 drop_priv_before_exec = no executable = doveadm-server extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 1 type = unix_listener doveadm-server { group = mode = 0600 user = } user = vsz_limit = 18446744073709551615 B } service imap-login { chroot = login client_limit = 0 drop_priv_before_exec = no executable = imap-login extra_groups = group = idle_kill = 0 inet_listener imap { address = port = 143 reuse_port = no ssl = no } inet_listener imaps { address = port = 993 reuse_port = no ssl = yes } privileged_group = process_limit = 0 process_min_avail = 0 protocol = imap service_count = 1 type = login user = $default_login_user vsz_limit = 18446744073709551615 B } service imap-postlogin { chroot = client_limit = 0 drop_priv_before_exec = no executable = script-login /var/vmail/mailfilters/postlogin extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = unix_listener imap-postlogin { group = mode = 0600 user = } user = root vsz_limit = 18446744073709551615 B } service imap-urlauth-login { chroot = token-login client_limit = 0 drop_priv_before_exec = no executable = imap-urlauth-login extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = imap service_count = 1 type = login unix_listener imap-urlauth { group = mode = 0666 user = } user = $default_login_user vsz_limit = 18446744073709551615 B } service imap-urlauth-worker { chroot = client_limit = 1 drop_priv_before_exec = no executable = imap-urlauth-worker extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1024 process_min_avail = 0 protocol = imap service_count = 1 type = unix_listener imap-urlauth-worker { group = mode = 0600 user = $default_internal_user } user = vsz_limit = 18446744073709551615 B } service imap-urlauth { chroot = client_limit = 1 drop_priv_before_exec = no executable = imap-urlauth extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1024 process_min_avail = 0 protocol = imap service_count = 1 type = unix_listener token-login/imap-urlauth { group = mode = 0666 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service imap { chroot = client_limit = 1 drop_priv_before_exec = no executable = imap extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1024 process_min_avail = 0 protocol = imap service_count = 1 type = unix_listener login/imap { group = mode = 0666 user = } user = vsz_limit = 18446744073709551615 B } service indexer-worker { chroot = client_limit = 1 drop_priv_before_exec = no executable = indexer-worker extra_groups = group = idle_kill = 0 privileged_group = process_limit = 10 process_min_avail = 0 protocol = service_count = 0 type = unix_listener indexer-worker { group = mode = 0600 user = $default_internal_user } user = vsz_limit = 18446744073709551615 B } service indexer { chroot = client_limit = 0 drop_priv_before_exec = no executable = indexer extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener indexer { group = mode = 0666 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service ipc { chroot = empty client_limit = 0 drop_priv_before_exec = no executable = ipc extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener ipc { group = mode = 0600 user = } unix_listener login/ipc-proxy { group = mode = 0600 user = $default_login_user } user = $default_internal_user vsz_limit = 18446744073709551615 B } service lmtp { chroot = client_limit = 1 drop_priv_before_exec = no executable = lmtp extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = lmtp service_count = 0 type = unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0600 user = postfix } unix_listener lmtp { group = mode = 0666 user = } user = vsz_limit = 18446744073709551615 B } service log { chroot = client_limit = 0 drop_priv_before_exec = no executable = log extra_groups = group = idle_kill = 4294967295 secs privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = log unix_listener log-errors { group = mode = 0600 user = } user = vsz_limit = 18446744073709551615 B } service managesieve-login { chroot = login client_limit = 0 drop_priv_before_exec = no executable = managesieve-login extra_groups = group = idle_kill = 0 inet_listener sieve { address = port = 4190 reuse_port = no ssl = no } privileged_group = process_limit = 0 process_min_avail = 0 protocol = sieve service_count = 1 type = login user = $default_login_user vsz_limit = 18446744073709551615 B } service managesieve { chroot = client_limit = 1 drop_priv_before_exec = no executable = managesieve extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = sieve service_count = 1 type = unix_listener login/sieve { group = mode = 0666 user = } user = vsz_limit = 18446744073709551615 B } service pop3-login { chroot = login client_limit = 0 drop_priv_before_exec = no executable = pop3-login extra_groups = group = idle_kill = 0 inet_listener pop3 { address = port = 110 reuse_port = no ssl = no } inet_listener pop3s { address = port = 995 reuse_port = no ssl = yes } privileged_group = process_limit = 0 process_min_avail = 0 protocol = pop3 service_count = 1 type = login user = $default_login_user vsz_limit = 18446744073709551615 B } service pop3 { chroot = client_limit = 1 drop_priv_before_exec = no executable = pop3 extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1024 process_min_avail = 0 protocol = pop3 service_count = 1 type = unix_listener login/pop3 { group = mode = 0666 user = } user = vsz_limit = 18446744073709551615 B } service quota-script { chroot = client_limit = 0 drop_priv_before_exec = no executable = script /root/SCRIPTS/MAIL/quotawarning.sh extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = unix_listener quota-socket { group = mode = 0600 user = vmail } user = root vsz_limit = 18446744073709551615 B } service quota-status { chroot = client_limit = 1 drop_priv_before_exec = no executable = quota-status -p postfix extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = unix_listener /var/spool/postfix/private/quota-status-socket { group = postfix mode = 0600 user = postfix } user = vsz_limit = 18446744073709551615 B } service replicator { chroot = client_limit = 0 drop_priv_before_exec = no executable = replicator extra_groups = group = idle_kill = 4294967295 secs privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener replicator-doveadm { group = mode = 00 user = $default_internal_user } unix_listener replicator { group = mode = 0600 user = $default_internal_user } user = vsz_limit = 18446744073709551615 B } service ssl-params { chroot = client_limit = 0 drop_priv_before_exec = no executable = ssl-params extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = startup unix_listener login/ssl-params { group = mode = 0666 user = } unix_listener ssl-params { group = mode = 0666 user = } user = vsz_limit = 18446744073709551615 B } service stats { chroot = empty client_limit = 0 drop_priv_before_exec = no executable = stats extra_groups = fifo_listener stats-mail { group = mode = 0600 user = } group = idle_kill = 4294967295 secs privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener stats { group = mode = 0600 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service tcpwrap { chroot = client_limit = 1 drop_priv_before_exec = no executable = tcpwrap extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = user = $default_internal_user vsz_limit = 18446744073709551615 B } shutdown_clients = yes ssl = yes ssl_ca = ssl_cert = </etc/ssl/certs/algerian-radio.dz.pub ssl_cert_username_field = commonName ssl_cipher_list = ALL:!LOW:!SSLv2:!EXP:!aNULL ssl_client_ca_dir = ssl_client_ca_file = ssl_client_cert = ssl_client_key = ssl_crypto_device = ssl_dh_parameters_length = 1024 ssl_key = </etc/ssl/private/algerian-radio.dz.priv ssl_key_password = ssl_parameters_regenerate = 0 ssl_prefer_server_ciphers = no ssl_protocols = !SSLv2 ssl_require_crl = yes ssl_verify_client_cert = no state_dir = /var/lib/dovecot stats_command_min_time = 1 mins stats_domain_min_time = 12 hours stats_ip_min_time = 12 hours stats_memory_limit = 16 M stats_session_min_time = 15 mins stats_user_min_time = 1 hours submission_host = syslog_facility = mail userdb { args = uid=vmail gid=vmail home=/var/vmail/%d/%n/dovecot default_fields = plain_pass=%w driver = static name = override_fields = result_failure = continue result_internalfail = continue result_success = return-ok skip = never } valid_chroot_dirs = verbose_proctitle = no verbose_ssl = no version_ignore = no protocol lmtp { mail_plugins = " quota acl notify mail_log sieve quota" } protocol imap { mail_plugins = " quota acl notify mail_log imap_quota imap_acl" } local_name mail.radioalgerie.dz { ssl_cert = </etc/ssl/radioalgerie.pub ssl_key = </etc/ssl/private/radioalgerie.priv } -- yassine -- sysadm +213-779 06 06 23 http://about.me/ychaouche Looking for side gigs.

2 1

TLS certificates SQL driver ?
by Andrew Mason 28 Sep '24

28 Sep '24

Hi folks, I was curious if it was possible to configure Dovecot to lookup the TLS certificate it should present in a similar way that the passdb lookups can use a driver. I have a few domains that share the same IP and I'm currently using SNI with both Dovecot and Postfix. I have pretty much all the configuration stored for each domain in a relational database , including the TLS cert that Postfix presents. If I add a new domain, I still have to add an entry to config file for dovecot i.e local_name imap.example.org { ssl_cert = </etc/ssl/certs/imap.example.org.crt ssl_key = </etc/ssl/private/imap.example.org.key } local_name imap.example2.org { ssl_cert = </etc/ssl/certs/imap.example2.org.crt ssl_key = </etc/ssl/private/imap.example2.org.key } I was hoping it was possible to use the same records in the database that I currently use for Postfix. Kind regards Andrew

1 0