- dovecot - dovecot.org

SIG11/Auth/FreeBSD
by Larry Rosenman 05 Jun '17

05 Jun '17

I'm seeing lots of: Jun 2 00:00:05 thebighonker exim[57437]: dovecot_login authenticator failed for ec2-52-40-16-7.us-west-2.compute.amazonaws.com (ADM IN) [52.40.16.7]:51339 I=[192.147.25.65]:465: 535 Incorrect authentication data (set_id=web) Jun 2 00:00:06 thebighonker exim[57439]: dovecot_login authenticator failed for ec2-52-40-16-7.us-west-2.compute.amazonaws.com (ADM IN) [52.40.16.7]:51363 I=[192.147.25.65]:465: 535 Incorrect authentication data (set_id=web) Jun 2 00:00:06 thebighonker exim[57438]: dovecot_login authenticator failed for ec2-52-40-16-7.us-west-2.compute.amazonaws.com (ADM IN) [52.40.16.7]:51355 I=[192.147.25.65]:465: 535 Incorrect authentication data (set_id=web) Jun 2 00:00:06 thebighonker exim[57443]: dovecot_login authenticator failed for ec2-52-40-16-7.us-west-2.compute.amazonaws.com (ADM IN) [52.40.16.7]:51385 I=[192.147.25.65]:465: 435 Unable to authenticate at present: authentication socket read error or premature e of Jun 2 00:00:06 thebighonker exim[57442]: dovecot_login authenticator failed for ec2-52-40-16-7.us-west-2.compute.amazonaws.com (ADM IN) [52.40.16.7]:51368 I=[192.147.25.65]:465: 435 Unable to authenticate at present: authentication socket read error or premature e of Jun 2 00:00:06 thebighonker exim[57441]: dovecot_login authenticator failed for ec2-52-40-16-7.us-west-2.compute.amazonaws.com (ADM IN) [52.40.16.7]:51361 I=[192.147.25.65]:465: 435 Unable to authenticate at present: authentication socket read error or premature e of Jun 2 00:00:06 thebighonker exim[57440]: dovecot_login authenticator failed for ec2-52-40-16-7.us-west-2.compute.amazonaws.com (ADM IN) [52.40.16.7]:51362 I=[192.147.25.65]:465: 435 Unable to authenticate at present: authentication socket read error or premature e of Jun 2 00:00:06 thebighonker dovecot: auth: Fatal: master: service(auth): child 55916 killed with signal 11 (core not dumped - set s ervice auth { drop_priv_before_exec=yes }) The suggestion to drop_priv_before_exec=yes breaks auth totally. doveconf -n: # 2.2.30.1 (eebd877): /usr/local/etc/dovecot/dovecot.conf # Pigeonhole version 0.4.18 (29cc74d) # OS: FreeBSD 11.0-STABLE amd64 auth_default_realm = lerctr.org auth_mechanisms = plain login auth_realms = lerctr.org thebighonker.lerctr.org tbh.lerctr.org auth_username_format = %Ln default_vsz_limit = 1 G deliver_log_format = msgid=%m: %$ (subject=%s from=%f size=%w) lda_mailbox_autocreate = yes listen = 192.147.25.65, :: lmtp_save_to_detail_mailbox = yes login_access_sockets = tcpwrap mail_attribute_dict = file:%h/mail/.imap/dovecot-mail-attributes mail_debug = yes mail_location = mbox:~/mail:INBOX=~/mail/INBOX mail_plugins = " fts fts_solr notify stats virtual" mail_privileged_group = mail mail_server_admin = mailto:ler@lerctr.org mail_server_comment = LERCTR Mail Server mailbox_list_index = yes managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext vacation-seconds editheader mboxmetadata servermetadata imapsieve vnd.dovecot.imapsieve namespace archive { hidden = no list = no location = mbox:~/MAIL-ARCHIVE prefix = ARCHIVE/ separator = / } namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox INBOX { auto = create } mailbox Junk { special_use = \Junk } mailbox SA/FN { special_use = \Junk } mailbox SENT { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } mailbox virtual/Flagged { special_use = \Flagged } mailbox virtual/all { special_use = \All } prefix = } namespace virtual { hidden = no list = yes location = virtual:~/MAIL-VIRTUAL:INDEX=MEMORY prefix = Virtual/ separator = / } passdb { args = failure_show_msg=yes session=yes max_requests=20 driver = pam } plugin { fts = solr fts_autoindex = yes fts_solr = url=http://thebighonker.lerctr.org:8983/solr/dovecot/ fts_tika = http://localhost:9998/tika/ imapsieve_url = sieve://thebighonker.lerctr.org mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename flag_change append mail_log_fields = uid box msgid size from subject vsize flags recipient_delimiter = + sieve = ~/.dovecot.sieve sieve_dir = ~/sieve sieve_extensions = +editheader +vacation-seconds +mboxmetadata +servermetadata sieve_plugins = sieve_imapsieve stats_command_min_time = 1 mins stats_domain_min_time = 12 hours stats_ip_min_time = 12 hours stats_memory_limit = 16 M stats_refresh = 5s stats_session_min_time = 15 mins stats_track_cmds = yes stats_user_min_time = 1 hours } protocols = imap pop3 lmtp sieve service auth { unix_listener auth-client { mode = 0666 } unix_listener auth-master { mode = 0666 } } service indexer-worker { drop_priv_before_exec = yes } service managesieve-login { inet_listener sieve { port = 4190 } inet_listener sieve_deprecated { port = 2000 } } service stats { chroot = empty client_limit = 0 drop_priv_before_exec = no executable = stats extra_groups = fifo_listener stats-mail { group = mode = 0666 user = } fifo_listener stats-user { group = mode = 0666 user = } group = idle_kill = 4294967295 secs privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener stats { group = mode = 0666 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service tcpwrap { unix_listener login/tcpwrap { group = $default_login_user mode = 0600 user = $default_login_user } } ssl_cert = </home/ler/letsencrypt-home/lerctr.org/fullchain.cer ssl_cipher_list = EECDH+ECDSA+AESGCM:EECDH+aRSA+AESGCM:EECDH+ECDSA+SHA384:EECDH+ECDSA+SHA256:EECDH+aRSA+SHA384:EECDH+aRSA+SHA256:EECDH+AESGCM:EECDH:EDH+AESGCM:EDH+aRSA:HIGH:!MEDIUM:!LOW:!aNULL:!eNULL:!LOW:!RC4:!MD5:!EXP:!PSK:!SRP:!DSS ssl_key = # hidden, use -P to show it ssl_protocols = !SSLv2 !SSLv3 userdb { driver = passwd } verbose_proctitle = yes protocol lmtp { mail_plugins = " fts fts_solr notify stats virtual sieve mail_log" } protocol lda { mail_plugins = " fts fts_solr notify stats virtual sieve mail_log" } protocol pop3 { mail_plugins = " fts fts_solr notify stats virtual mail_log" } protocol !doveadm { mail_plugins = " fts fts_solr notify stats virtual mail_log" } protocol imap { imap_client_workarounds = tb-extra-mailbox-sep tb-lsub-flags imap_logout_format = in=%i out=%o fhc=%{fetch_hdr_count} fhb=%{fetch_hdr_bytes} fbc=%{fetch_body_count} fbb=%{fetch_body_bytes} del=%{deleted} exp=%{expunged} trash=%{trashed} imap_metadata = yes mail_max_userip_connections = 50 mail_plugins = " fts fts_solr notify stats virtual mail_log imap_sieve imap_stats stats" } -- Larry Rosenman http://www.lerctr.org/~ler Phone: +1 214-642-9640 E-Mail: larryrtx(a)gmail.com US Mail: 17716 Limpia Crk, Round Rock, TX 78664-7281

2 4

Possible RENAME bug
by Gabriele Bulfon 05 Jun '17

05 Jun '17

Hello, I'm having some trouble working on a webapp managing the imap tree on Dovecot. The same doesn't happen on other imap servers (e.g. Cyrus). Looks like if I receive shared folders from another user, and try to rename a folder in it, the rename command returns "ok", then if you list the new folder name, it isn't there. Looks like you've lost all the original folder because if you try listing the parent folder, you don't have nor the original nor the new name, even trying to logout/disconnect and reconnect/login. Luckily nothing is lost actually, if you try to create a new folder on the parent folder, and then list the parent folder, you get both the newly created one and the renamed one also appears magically! Here is the IMAP trace to reproduce: *** ON ACCOUN RECEIVING SHARED FOLDER *** PREPARE A FOLDER IN SHARED TREE WITH JUST ONE CHILD "aaaa" *** THEN RENAME aaaa FOLDER TO bbbb *** AFTER "OK Rename" FOLDER IS NOT PRESENT IN LIST A3 LIST "" Shared/gabriele.prova(a)sonicle.com/Junk/aaaa * LIST (\HasNoChildren) "/" Shared/gabriele.prova(a)sonicle.com/Junk/aaaa A3 OK List completed. A4 RENAME Shared/gabriele.prova(a)sonicle.com/Junk/aaaa Shared/gabriele.prova(a)sonicle.com/Junk/bbbb A4 OK Rename completed. A5 LIST "" Shared/gabriele.prova(a)sonicle.com/Junk/bbbb A5 OK List completed. *** bbbb IS NOT LISTED AFTER "OK Rename"! *** LOGOUT/DISCONNECT - CONNECT/LOGIN AND LIST BRANCH *** A66 LIST "" "Shared/gabriele.prova(a)sonicle.com/%" * LIST (\HasNoChildren) "/" Shared/gabriele.prova(a)sonicle.com/Sent * LIST (\HasNoChildren) "/" Shared/gabriele.prova(a)sonicle.com/Drafts * LIST (\HasNoChildren) "/" Shared/gabriele.prova(a)sonicle.com/Trash * LIST (\HasNoChildren) "/" Shared/gabriele.prova(a)sonicle.com/Spam * LIST (\HasNoChildren) "/" Shared/gabriele.prova(a)sonicle.com/Junk * LIST (\HasNoChildren) "/" Shared/gabriele.prova(a)sonicle.com/INBOX A66 OK List completed. *** Junk HAS NO CHILDREN! *** CREATE A NEW FOLDER IN Junk *** A68 CREATE Shared/gabriele.prova(a)sonicle.com/Junk/zzzz A68 OK Create completed. A69 LIST "" Shared/gabriele.prova(a)sonicle.com/Junk/zzzz * LIST (\HasNoChildren) "/" Shared/gabriele.prova(a)sonicle.com/Junk/zzzz A69 OK List completed. *** "zzzz" IS LISTED, SO NOW LIST PARENT BRANCH *** A26 LIST "" "Shared/gabriele.prova(a)sonicle.com/%" * LIST (\HasNoChildren) "/" Shared/gabriele.prova(a)sonicle.com/Sent * LIST (\HasNoChildren) "/" Shared/gabriele.prova(a)sonicle.com/Drafts * LIST (\HasNoChildren) "/" Shared/gabriele.prova(a)sonicle.com/Trash * LIST (\HasNoChildren) "/" Shared/gabriele.prova(a)sonicle.com/Spam * LIST (\HasChildren) "/" Shared/gabriele.prova(a)sonicle.com/Junk * LIST (\HasNoChildren) "/" Shared/gabriele.prova(a)sonicle.com/INBOX A26 OK List completed. *** Junk NOW HAS CHILDREN, SO NOW LIST Junk BRANCH *** A29 LIST "" "Shared/gabriele.prova(a)sonicle.com/Junk/%" * LIST (\HasNoChildren) "/" Shared/gabriele.prova(a)sonicle.com/Junk/bbbb * LIST (\HasNoChildren) "/" Shared/gabriele.prova(a)sonicle.com/Junk/zzzz A29 OK List completed. *** bbbb MAGICALLY APPEARS! NOTHING IS LOST. Is there anything I can do to force "bbbb" to reappear without having to create a new folder? Any idea? Thanks in advance, Gabriele ---------------------------------------------------------------------------------------- Sonicle S.r.l. : http://www.sonicle.com Music: http://www.gabrielebulfon.com Quantum Mechanics : http://www.cdbaby.com/cd/gabrielebulfon

2 2

Problem with LMTP
by Angel L. Mateo 05 Jun '17

05 Jun '17

Hello, I'm having a problem with LMTP in a proxy server since I upgraded from 2.1.16 to 2.2.28. In my logs I have: Apr 26 12:54:17 musio12 dovecot: lmtp(2082): Fatal: master: service(lmtp): child 2082 killed with signal 11 (core dumped). As far as I could check the message is delivered in a later connection. I have enabled core dumped files, but how could I debug it? -- Angel L. Mateo Martínez Sección de Telemática Área de Tecnologías de la Información y las Comunicaciones Aplicadas (ATICA) http://www.um.es/atica Tfo: 868889150 Fax: 868888337

2 11

Retrieving mail from read-only mdbox
by Mark Moseley 05 Jun '17

05 Jun '17

This is a 'has anyone run into this and solved it' post. And yes, I've been reading and re-reading TFM but without luck. The background is that I'm working on tooling before we start a mass maildir->mdbox conversion. One of those tools is recovering mail from backups (easy as pie with maildir). We've got all of our email on Netapp file servers. They have nice snapshotting but the snapshots are, of course, readonly. My question: is there a doveadm command that will allow for email to be retrieved from a readonly mdbox, either directly (like manipulating the mdbox files directly) or by doveadm talking to the dovecot processes? Ideally, there'd be something like doveadm dump, but that could dump selected message contents. I've tried using IMAP with mail_location pointed at the snapshot, but, though I can get a listing of emails in the mailbox, the fetch fails when dovecot can't write-lock dovecot.index.log. If anyone has gotten something similar to work, I'd love to hear about it. A working IMAP setup would be the ideal, since it's more easily automatible (but I'll take whatever I can get). Any and all hints are most welcome!

4 4

10-ssl.conf: Unknown setting: ssl / debian 1:2.2.13-12~deb8u
by Sophie Loewenthal 05 Jun '17

05 Jun '17

Hi, I've been trying to get dovecot2 running and kept having this error message: May 13 13:38:32 mail systemd[1]: Started Dovecot IMAP/POP3 email server. May 13 13:38:32 mail dovecot[2178]: doveconf: Fatal: Error in configuration file /etc/dovecot/conf.d/10-ssl.conf line 61: Unknown setting: ssl # dovecot --build-options Build options: ioloop=epoll notify=inotify ipv6 openssl io_block_size=8192 Mail storages: shared mdbox sdbox maildir mbox cydir imapc pop3c raw fail SQL driver plugins: mysql postgresql sqlite Passdb: checkpassword ldap pam passwd passwd-file shadow sql Userdb: checkpassword ldap(plugin) nss passwd prefetch passwd-file sql # openssl version OpenSSL 1.0.1t 3 May 2016 This package is from from Debian repos with version number 1:2.2.13-12~deb8u amd64 In case I had inadvertently entered some invisible charaters in 10-ssl.conf, I deleted and typed this out. Not copy-pasted: # >10-ssl.conf # cat 10-ssl.conf # echo 'ssl = required' >10-ssl.conf # echo 'ssl_key = </etc/ssl/private/xxx.key' >>10-ssl.conf # echo 'ssl_cert = </etc/ssl/private/xxx.pem' >>10-ssl.conf I’ve done usual searching online for a week and read some dox, but cannot see what I’ve missed out. Any ideas? Please? Thanks, Sophie

4 14

quota clone + mysql + duplicate key
by Dimos Alevizos 05 Jun '17

05 Jun '17

I'm trying to setup quota clone with mysql on dovecot 2.2.29.1. I see in the wiki that the table is always updated to the new value (https://wiki.dovecot.org/Plugins/QuotaClone) : > Every time quota is updated, the value is updated to the cloned dict. > There are race conditions with it so the quota may not always be 100% > correct. The old value is always replaced with the new one though (not > just incremented/decremented) so the cloned quota is never too much wrong. But the queries I see don't agree : 1186029 Query BEGIN 1186029 Query INSERT INTO quota (bytes,messages,username) VALUES (25002030,226,'user(a)domain.tld') ON DUPLICATE KEY UPDATE bytes=bytes+25002030,messages=messages+226 1186029 Query COMMIT Is it a bug or am I missing something in my configuration ? The relevant part of the config : dict { sqlquota = mysql:/etc/dovecot/dovecot-dict-sql.conf.ext } plugin { quota = count:User quota quota_clone_dict = proxy::sqlquota quota_exceeded_message = Quota for this mail account has been exceeded, please try again later. quota_grace = 1M quota_vsizes = yes } map { pattern = priv/quota/storage table = quota username_field = username value_field = bytes } map { pattern = priv/quota/messages table = quota username_field = username value_field = messages } Dimos

1 0

Panic: file dsync-brain-mailbox.c: line 814 ...
by Sander Lepik 04 Jun '17

04 Jun '17

Hi! We have 2 servers replicating each other and after upgrade to 2.2.26.0 we are seeing this in the logs: Primary server: Nov 17 09:37:39 mailhost01 dovecot: dsync-server(user(a)domain.ee): Panic: file dsync-brain-mailbox.c: line 814 (dsync_brain_slave_recv_mailbox): assertion failed: (memcmp(dsync_box->mailbox_guid, local_dsync_box.mailbox_guid, sizeof(dsync_box->mailbox_guid)) == 0) Nov 17 09:37:39 mailhost01 dovecot: dsync-server(user(a)domain.ee): Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0(+0x9438e) [0x7f3ccceb238e] -> /usr/lib/dovecot/libdovecot.so.0(+0x9447c) [0x7f3ccceb247c] -> /usr/lib/dovecot/libdovecot.so.0(i_fatal+0) [0x7f3ccce4ba4e] -> dovecot/doveadm-server(dsync_brain_slave_recv_mailbox+0x3d8) [0x7f3ccd8f66f8] -> dovecot/doveadm-server(dsync_brain_run+0x650) [0x7f3ccd8f4110] -> dovecot/doveadm-server(+0x4143b) [0x7f3ccd8f443b] -> dovecot/doveadm-server(+0x5735f) [0x7f3ccd90a35f] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_call_io+0x4c) [0x7f3cccec6bdc] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run_internal+0x10a) [0x7f3cccec809a] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0x25) [0x7f3cccec6c65] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_run+0x38) [0x7f3cccec6e08] -> dovecot/doveadm-server(+0x26b99) [0x7f3ccd8d9b99] -> dovecot/doveadm-server(+0x28efc) [0x7f3ccd8dbefc] -> dovecot/doveadm-server(+0x3daba) [0x7f3ccd8f0aba] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_call_io+0x4c) [0x7f3cccec6bdc] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run_internal+0x10a) [0x7f3cccec809a] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0x25) [0x7f3cccec6c65] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_run+0x38) [0x7f3cccec6e08] -> /usr/lib/dovecot/libdovecot.so.0(master_service_run+0x13) [0x7f3ccce51f53] -> dovecot/doveadm-server(main+0x19f) [0x7f3ccd8ccdef] -> /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xf5) [0x7f3ccca94b45] -> dovecot/doveadm-server(+0x19ea6) [0x7f3ccd8ccea6] Nov 17 09:37:39 mailhost01 dovecot: dsync-server(user(a)domain.ee): Fatal: master: service(doveadm): child 42621 killed with signal 6 (core dumps disabled) Secondary server: Nov 17 09:37:40 secondarymailhost01 dovecot: dsync-local(user(a)domain.ee): Error: read(mailhost01.domeen.ee) failed: EOF (last sent=mailbox, last recv=mailbox_state) I'm guessing that it happens during automatic full resync, but that's just guessing. OS is Debian 8 (x86_64) and Dovecot is recompiled from Debian's unstable repository. -- Sander

2 2

ACL File
by Bobber 02 Jun '17

02 Jun '17

I'm getting inconsistent behavior from my acl file. I have an acl vfile configured with this: > Jobs$* anyone lrwikst > $* user=bob.wooldridge(a)edm-inc.com lrwstipekxa > $* user=michael.user(a)edm-inc.com lrwstipekxa > Jobs$* user=bob.wooldridge(a)edm-inc.com lrwstipekxa > Jobs$* user=michael.user(a)edm-inc.com lrwstipekxa The Jobs folder is a public shared folder. I want just the two users to be able to have complete control of anything in the shared Jobs folder. Currently, user bob is able to move folders to sub folders but user michael is sometimes able to move folders but mostly not. I am using Thunderbird as the mail client. Sometimes I can restart Thunderbird and it will allow one operation but subsequent operations error out with Thunderbird saying the user does not have permissions. Here's my doveconf -n: > # 2.2.30.1 (eebd877): /usr/local/etc/dovecot/dovecot.conf > # OS: Linux 3.16.0-0.bpo.4-amd64 x86_64 Debian 7.11 > auth_cache_size = 8 k > auth_debug = yes > first_valid_gid = 89 > first_valid_uid = 89 > last_valid_gid = 89 > last_valid_uid = 89 > listen = * > log_path = /dev/stderr > login_greeting = IMAP service for edm-inc.com clients. > mail_location = maildir:~/Maildir > mail_plugins = " listescape acl" > namespace { > inbox = yes > location = > prefix = > separator = $ > type = private > } > namespace { > location = maildir:/home/vpopmail/domains/edm-inc.com/public > prefix = Jobs$ > separator = $ > subscriptions = no > type = public > } > passdb { > args = cache_key=%u%s > driver = vpopmail > } > plugin { > acl = vfile:/usr/local/etc/dovecot/acls:cache_secs=300 > } > protocols = imap > service auth { > user = root > vsz_limit = 64 M > } > service imap-login { > process_limit = 150 > service_count = 1 > } > ssl_cert = </etc/ssl/certs/mail_edm-inc_com.pem > ssl_key = # hidden, use -P to show it > userdb { > driver = vpopmail > } > userdb { > driver = vpopmail > } > protocol imap { > mail_plugins = " listescape acl imap_acl" > } -- *Bob Wooldridge* Blog: http://kc0dxf.net/blog/

1 0

updated to dove 2.30.1 and still the same error ....
by dovecot＠jeffandjessi.com 02 Jun '17

02 Jun '17

Well.. updated to 2.30.1 hoping it would fix this mysterious seg fault ... ,but nope ... auth: Fatal: master: service(auth): child 14502 killed with signal 11 (core dumped) the core dump shows gdb) bt #0 0x00007f7ff4a06bee in ?? () #1 0x00007f7ff74a4f44 in io_loop_handle_remove () from /usr/local/lib/dovecot/libdovecot.so.0 #2 0x00007f7ff74a3765 in io_remove_full () from /usr/local/lib/dovecot/libdovecot.so.0 #3 0x00007f7ff7438b62 in master_service_deinit () from /usr/local/lib/dovecot/libdovecot.so.0 #4 0x00000000004307ef in main () no symbols are available as this is a pkg install.... so whats next? time to dump dovecot after running it for 10 years? Can't believe no one else is seeing this .... the symtoms are dovecot starts up fine when a client connects, they authorize just fine and download email .... about a minute later the auth process crashes and the entire process starts over .... so how do you trouble shoot this ... it sounds like a coding issue some place .... anyone ?

2 1

Problem with dsync backup
by Sergio Belkin 02 Jun '17

02 Jun '17

Hi folks, Firstly, the first: dovecot --version 2.2.10 dovecot -n # 2.2.10: /etc/dovecot/dovecot.conf # OS: Linux 3.10.0-514.16.1.el7.x86_64 x86_64 CentOS Linux release 7.3.1611 (Core) auth_debug = yes auth_krb5_keytab = /var/lib/dovecot/krb5.keytab auth_master_user_separator = * auth_mechanisms = plain login gssapi auth_verbose = yes debug_log_path = /dev/null default_process_limit = 400 disable_plaintext_auth = no first_valid_uid = 988 imapc_features = rfc822.size fetch-headers imapc_host = mail.example-aid.com imapc_master_user = osstand imapc_password = secret imapc_ssl = starttls imapc_ssl_verify = no imapc_user = %u import_environment = TZ KRB5CCNAME last_valid_uid = 988 lmtp_save_to_detail_mailbox = yes mail_gid = vmail mail_location = maildir:~/Maildir mail_plugins = " acl listescape fts fts_lucene" mail_prefetch_count = 20 mail_shared_explicit_inbox = yes mail_uid = vmail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave imapflags mbox_write_locks = fcntl namespace PUBLIC { list = children location = maildir:/var/lib/nethserver/vmail/vmail/Maildir:INDEXPVT=~/Maildir/public prefix = Public/ separator = / subscriptions = no type = public } namespace ROOT { inbox = yes location = mailbox Drafts { auto = no special_use = \Drafts } mailbox Sent { auto = no special_use = \Sent } mailbox "Sent Messages" { auto = no special_use = \Sent } mailbox Trash { auto = no special_use = \Trash } prefix = separator = / subscriptions = yes type = private } namespace SHARED_USERS { disabled = no list = children location = maildir:/var/lib/nethserver/vmail/%%u/Maildir:INDEXPVT=~/Maildir/shared/%%u prefix = Shared/%%n(a)example.local/ separator = / subscriptions = no type = shared } passdb { args = /etc/dovecot/master-users driver = passwd-file master = yes } passdb { args = dovecot-master driver = pam master = yes } passdb { args = /etc/dovecot/deny.passwd deny = yes driver = passwd-file } passdb { args = max_requests=100 failure_show_msg=yes blocking=yes driver = pam } plugin { acl = vfile acl_shared_dict = file:/var/lib/nethserver/vmail/shared-mailboxes.db antispam_backend = MAILTRAIN antispam_mail_notspam = ham antispam_mail_sendmail = /usr/libexec/nethserver/spam-training.sh antispam_mail_sendmail_args = %u antispam_mail_spam = spam antispam_spam = Junk antispam_trash = Trash fts = lucene fts_lucene = whitespace_chars=@. sieve_after = /var/lib/nethserver/sieve-scripts/after.sieve sieve_before = /var/lib/nethserver/sieve-scripts/before.sieve sieve_extensions = +imapflags } protocols = imap lmtp sieve pop3 service anvil { client_limit = 1603 } service auth { client_limit = 2000 unix_listener /var/spool/postfix/private/smtpauth { group = postfix mode = 0660 user = postfix } unix_listener auth-userdb { group = vmail mode = 0660 } } service dict { unix_listener dict { mode = 0600 user = vmail } } service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 } unix_listener imap-ipc { group = root mode = 0600 user = $default_internal_user } } service imap-postlogin { executable = script-login /usr/libexec/nethserver/dovecot-postlogin user = $default_internal_user } service imap { executable = imap imap-postlogin } service lmtp { client_limit = 1 unix_listener lmtp { group = vmail mode = 0660 user = vmail } user = vmail } service managesieve { executable = managesieve sieve-postlogin } service pop3-postlogin { executable = script-login /usr/libexec/nethserver/dovecot-postlogin user = $default_internal_user } service pop3 { executable = pop3 pop3-postlogin } service sieve-postlogin { executable = script-login /usr/libexec/nethserver/dovecot-postlogin user = $default_internal_user } ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { args = username_format=%Ln /etc/dovecot/imap.passwd driver = passwd-file override_fields = uid=988 gid=985 home=/var/lib/nethserver/vmail/%Ln } userdb { driver = passwd override_fields = uid=988 gid=985 home=/var/lib/nethserver/vmail/%u skip = found } protocol imap { mail_max_userip_connections = 12 mail_plugins = " acl listescape fts fts_lucene imap_acl antispam" } protocol lmtp { mail_plugins = " acl listescape fts fts_lucene sieve" } When I try to import a mailbox from an Exchange server, this is the output: time dsync -D -v backup -R -u sergio.zuniga(a)example.local imapc: |& tee /tmp/errors2 doveadm(root): Debug: Loading modules from directory: /usr/lib64/dovecot doveadm(root): Debug: Module loaded: /usr/lib64/dovecot/lib01_acl_plugin.so doveadm(root): Debug: Module loaded: /usr/lib64/dovecot/lib20_fts_plugin.so doveadm(root): Debug: Module loaded: /usr/lib64/dovecot/lib20_listescape_plugin.so doveadm(root): Debug: Module loaded: /usr/lib64/dovecot/lib21_fts_lucene_plugin.so doveadm(root): Debug: Loading modules from directory: /usr/lib64/dovecot/doveadm doveadm(root): Debug: Module loaded: /usr/lib64/dovecot/doveadm/lib10_doveadm_acl_plugin.so doveadm(root): Debug: Skipping module doveadm_expire_plugin, because dlopen() failed: /usr/lib64/dovecot/doveadm/lib10_doveadm_expire_plugin.so: undefined symbol: expire_set_deinit (this is usually intentional, so just ignore this message) doveadm(root): Debug: Skipping module doveadm_quota_plugin, because dlopen() failed: /usr/lib64/dovecot/doveadm/lib10_doveadm_quota_plugin.so: undefined symbol: quota_user_module (this is usually intentional, so just ignore this message) doveadm(root): Debug: Module loaded: /usr/lib64/dovecot/doveadm/lib10_doveadm_sieve_plugin.so doveadm(root): Debug: Module loaded: /usr/lib64/dovecot/doveadm/lib20_doveadm_fts_lucene_plugin.so doveadm(root): Debug: Module loaded: /usr/lib64/dovecot/doveadm/lib20_doveadm_fts_plugin.so doveadm(sergio.zuniga(a)example.local): Debug: Effective uid=988, gid=985, home=/var/lib/nethserver/vmail/sergio.zuniga(a)example.local doveadm(sergio.zuniga(a)example.local): Debug: Namespace ROOT: type=private, prefix=, sep=/, inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir:~/Maildir doveadm(sergio.zuniga(a)example.local): Debug: maildir++: root=/var/lib/nethserver/vmail/sergio.zuniga(a)example.local/Maildir, index=, indexpvt=, control=, inbox=/var/lib/nethserver/vmail/sergio.zuniga(a)example.local/Maildir, alt= doveadm(sergio.zuniga(a)example.local): Debug: acl: initializing backend with data: vfile doveadm(sergio.zuniga(a)example.local): Debug: acl: acl username = sergio.zuniga(a)example.local doveadm(sergio.zuniga(a)example.local): Debug: acl: owner = 1 doveadm(sergio.zuniga(a)example.local): Debug: acl vfile: Global ACL directory: (none) doveadm(sergio.zuniga(a)example.local): Debug: Namespace SHARED_USERS: type=shared, prefix=Shared/%n(a)example.local/, sep=/, inbox=no, hidden=no, list=children, subscriptions=no location=maildir:/var/lib/nethserver/vmail/%u/Maildir:INDEXPVT=~/Maildir/shared/%u doveadm(sergio.zuniga(a)example.local): Debug: shared: root=/var/run/dovecot, index=, indexpvt=, control=, inbox=, alt= doveadm(sergio.zuniga(a)example.local): Debug: fts: Indexes disabled for namespace 'Shared/%n(a)example.local/' doveadm(sergio.zuniga(a)example.local): Debug: acl: initializing backend with data: vfile doveadm(sergio.zuniga(a)example.local): Debug: acl: acl username = sergio.zuniga(a)example.local doveadm(sergio.zuniga(a)example.local): Debug: acl: owner = 0 doveadm(sergio.zuniga(a)example.local): Debug: acl vfile: Global ACL directory: (none) doveadm(sergio.zuniga(a)example.local): Debug: Namespace PUBLIC: type=public, prefix=Public/, sep=/, inbox=no, hidden=no, list=children, subscriptions=no location=maildir:/var/lib/nethserver/vmail/vmail/Maildir:INDEXPVT=~/Maildir/public doveadm(sergio.zuniga(a)example.local): Debug: maildir++: root=/var/lib/nethserver/vmail/vmail/Maildir, index=, indexpvt=/var/lib/nethserver/vmail/sergio.zuniga(a)example.local/Maildir/public, control=, inbox=, alt= doveadm(sergio.zuniga(a)example.local): Debug: acl: initializing backend with data: vfile doveadm(sergio.zuniga(a)example.local): Debug: acl: acl username = sergio.zuniga(a)example.local doveadm(sergio.zuniga(a)example.local): Debug: acl: owner = 0 doveadm(sergio.zuniga(a)example.local): Debug: acl vfile: Global ACL directory: (none) doveadm(sergio.zuniga(a)example.local): Debug: acl vfile: file /var/lib/nethserver/vmail/sergio.zuniga(a)example.local/Maildir/dovecot-acl not found doveadm(sergio.zuniga(a)example.local): Debug: acl vfile: file /var/lib/nethserver/vmail/sergio.zuniga(a)example.local/Maildir/.Sent/dovecot-acl not found doveadm(sergio.zuniga(a)example.local): Debug: Namespace : Using permissions from /var/lib/nethserver/vmail/sergio.zuniga(a)example.local/Maildir: mode=0700 gid=default dsync(sergio.zuniga(a)example.local): Debug: Effective uid=988, gid=985, home=/var/lib/nethserver/vmail/sergio.zuniga(a)example.local dsync(sergio.zuniga(a)example.local): Debug: Namespace ROOT: type=private, prefix=, sep=/, inbox=yes, hidden=no, list=yes, subscriptions=yes location=imapc: dsync(sergio.zuniga(a)example.local): Debug: imapc(mail.example.com:143): Looking up IP address dsync(sergio.zuniga(a)example.local): Debug: imapc(mail.example.com:143): Connecting to 192.168.50.1:143 dsync(sergio.zuniga(a)example.local): Debug: imapc(mail.example.com:143): Server capabilities: IMAP4 IMAP4rev1 LOGINDISABLED STARTTLS IDLE NAMESPACE LITERAL+ dsync(sergio.zuniga(a)example.local): Debug: imapc(mail.example.com:143): Starting SSL handshake dsync(sergio.zuniga(a)example.local): Debug: imapc(mail.example.com:143): SSL handshake successful, ignoring invalid certificate: SSL certificate not received dsync(sergio.zuniga(a)example.local): Debug: imapc(mail.example.com:143): Server capabilities: IMAP4 IMAP4rev1 AUTH=GSSAPI AUTH=PLAIN IDLE NAMESPACE LITERAL+ dsync(sergio.zuniga(a)example.local): Debug: imapc(mail.example.com:143): Authenticating as neth.stand for user sergio.zuniga(a)example.local dsync(sergio.zuniga(a)example.local): Error: imapc(mail.example.com:143): Authentication failed: AUTHENTICATE failed. dsync(sergio.zuniga(a)example.local): Debug: imapc(mail.example.com:143): Disconnected dsync(sergio.zuniga(a)example.local): Error: imapc: Command failed: Disconnected from server dsync(sergio.zuniga(a)example.local): Error: user sergio.zuniga(a)example.local: Initialization failed: Namespace '': Mailbox list driver imapc: Failed to access imapc backend Also, mailllog has a lot of lines as of: dovecot: auth: passwd-file(john.doe(a)infoestructura.local,127.0.0.1,<qRwxrulQ/gB/AAAB>): unknown user Please could you help to know where is the error? Thanks in advance!! -- -- Sergio Belkin LPIC-2 Certified - http://www.lpi.org

2 1